BusinessesPolicies processed320 Claims Processed48 Nº Clients245
Cyber risk insurance
The growing technological transformation we are immersed in is contributing to accelerating cyber risks, creating new attack vectors and greatly expanding the surface that organisations must monitor and defend.
In short
What is cyber risk insurance
Cyber risk insurance covers the economic consequences of a cyber incident: emergency technical response, data and systems recovery, loss of profits due to downtime, fines and notifications resulting from a data breach, and claims from affected third parties. Its most valuable element is not the compensation, but the response team that is activated in the first hours, when most companies do not know whom to call.
Advantages
Advantages of cyber risk insurance
The most valued aspect of cyber insurance does not come in the form of compensation, but as a phone call that someone answers.
A team you cannot have on staff
Forensic expert, extortion negotiator, and breach specialist lawyer, available within hours. No medium-sized company can maintain these three profiles on payroll.
Taking out a policy forces you to update yourself
The questionnaire requires two-factor authentication, immutable backups, and managed endpoints. Preparing it raises your actual security level, whether or not you make a claim.
Requirement from your own clients
More and more contracts and tenders require the provider to prove they have cyber insurance. Without it, you are excluded from tenders you could win today.
Billing continues during downtime
The interruption cover supports the profit and loss account during the recovery weeks, which is where the real impact of the attack is determined.
Profile
Who we work for
Companies with production dependent on systems
Industry and logistics where an IT outage immediately halts physical activity.
Organisations that handle personal data
Healthcare, education, retail, and professional services, exposed to fines and claims from affected parties.
Companies with critical cloud providers
Profiles whose continuity depends on third parties and need interruption cover due to provider failure.
Companies subject to NIS2
Essential and important entities with reinforced risk management and notification obligations.
Scope
Main covers of cyber risk insurance
- 24/7 incident response team: forensic, containment and recovery
- Data restoration, systems and configuration reconstruction
- Business interruption and additional expenses to maintain activity
- Data breach management: notification to affected parties, legal advice and defence before the AEPD
- Third-party liability for data and security failure
- Cyber extortion, with specialised negotiation, and social engineering fraud with negotiated sublimit
The JORI method
How we work
Risk analysis
We study the activity, assets, and plausible scenarios. Without that diagnosis, comparing policies is comparing prices of different things.
Programme design
We define covers, limits, deductibles, and acceptable exclusions. We decide what is transferred to the insurer and what is consciously retained.
Negotiation with the market
We present the risk to the insurers we work with and negotiate terms. We are independent: we do not belong to any company.
Support and claims
We review the programme at each renewal and, when a claim occurs, we act as your technical representative with the insurer until payment is received.
Frequent doubts
Most frequently asked questions about cyber risk insurance
Does the policy pay the ransom for ransomware?
It can cover it, with a specialised negotiator and always within the applicable legal and international sanctions framework. But the decision to pay is the last option and rarely the best: the focus of the work is on recovering from clean backups and containing the spread.
Will I be required to have security measures in place to contract?
Yes. The market today requires at least two-factor authentication for remote access, isolated and immutable backups, and managed endpoint protection. We prepare that questionnaire with the company before going to market, as it affects both the premium and the insurability itself.
Does it cover GDPR fines?
It always covers legal defence and breach management costs. The fine itself is only covered to the extent that it is legally insurable in the applicable jurisdiction, which requires reviewing the specific wording of each policy.
What happens if my cloud provider suffers the incident?
It is covered by the technology provider failure interruption guarantee, which must be expressly contracted. Without it, the fall of a critical provider leaves the company at a standstill and without business interruption cover.
Is the insurance useful if I already have a good IT team?
They are different and complementary things. A good internal team reduces the probability; the policy provides financial capacity and, above all, specialists in incident response, negotiation and legal breach management, profiles that no medium-sized company has on staff.
How long does it take to activate the response?
The incident line operates 24/7 and the forensic team is mobilised within hours. That's why we insist that the response phone number is printed and accessible outside corporate systems: in a massive encryption, the contact directory also becomes unavailable.
Cyber risk
Let's talk about protecting your business
Insights
View the topic cyber risk and data What we have written about this
Analysis
Anatomy of a ransomware claim: the seventy-two hours that determine the cost
The ransom is almost never the most expensive item. The costly part is the downtime, the reconstruction of the environment, and the notifications that must be made against the clock.
8 min readRegulatory updates
NIS2: which companies it affects and what changes in their cyber risk policy
The directive greatly expands the number of obligated entities and introduces personal liability for management. What it implies for insurance.
6 min readRegulatory updates
DORA: what it requires from financial entities and their technology providers
The European regulation on digital operational resilience also applies to those providing ICT services to the financial sector. Many providers still do not know this.
6 min read
