Business insurance · Cyber
Cyber cover is one part of resilience. It should sit alongside practical controls, tested backups, response planning and supplier oversight.
In brief: Cyber insurance may help a business with selected costs and liabilities following an insured cyber event, such as a security breach, ransomware incident or network interruption. Cover depends on systems, data, controls, incident facts and the policy wording.
At a glance
Possible features to discuss. Availability and scope depend on the selected policy.
Important conditions should be explained near the benefit—not hidden in the fine print.
Before you request a quote
Start with high-level facts. Do not submit sensitive identity, financial or claim evidence through an initial web enquiry.
What makes this risk different
A cyber event can create forensic, restoration, legal, communications and business-interruption costs for the affected organisation, as well as allegations from customers or other third parties. Ask which categories are contemplated, whether they have separate limits and what triggers them.
Malware, ransomware, fraudulent payment instructions and account compromise can be dealt with differently in a policy. Compare definitions, payment-authorisation controls, fraud exclusions and any insurer approval requirements before relying on a broad “cyber” label.
Multi-factor authentication, backups, patching, privileged access, supplier access and incident history can be material to the underwriting discussion. The Information Regulator’s guidance also makes clear that a security compromise requires a careful response beyond insurance notification.
A practical plan identifies who isolates systems, preserves evidence, engages specialists, communicates with affected people and checks legal notification duties. Insurance can be one support route, but it does not replace the organisation’s incident response and governance.
Source context
The Information Regulator explains that a POPIA security compromise can involve cyberattacks or failures of technical and organisational safeguards, and that responsible parties have notification duties. This is legal context, not an insurance-cover promise. Read the Information Regulator fact sheet.
Compare carefully
A useful comparison does more than compare premiums. Put the relevant limits, excesses, key exclusions, claims conditions and service steps side by side before accepting a policy.
What is insured, what is specifically excluded, and which extensions are optional?
Which standard or additional excesses could apply, and are they manageable?
Which disclosures, valuations, security steps or maintenance duties must be met?
Who must be notified, how quickly, and what evidence could be needed?
Related coverage
Business insurance · Core risk
A business policy should be organised around what could stop revenue, damage key assets or create a liability—not around a generic product menu.
Read guideBusiness insurance · Property
Commercial property cover begins with a reliable asset and replacement-cost picture. It should be considered together with interruption, liability and continuity risks.
Read guideBusiness insurance · Liability
Liability cover is not a blanket promise to pay every third-party claim. The allegation, legal liability, insured event, exclusions and policy limit matter.
Read guideAnswer library
No. Insurers commonly assess controls, and cover is not a substitute for prevention, backups, response planning or staff awareness.
It may address selected costs, but response depends on the policy, incident, controls and legal context. Check the wording carefully.
Any business relying on email, online systems, customer information or payments can face cyber exposure. The relevant question is how operations could be affected.
The relevant evidence depends on the event, but records of the insured item or activity, prompt notification, photographs, valuations, contracts or incident details can be important. The policy wording determines the actual claims requirements.
This guide addresses one risk area. Related property, liability, motor, cyber, transit or interruption risks may need separate analysis. Compare the policy definitions, schedule and exclusions before assuming one section protects another.
Review the insured item or activity, the specific insured events, limits, excesses, exclusions, disclosure duties, security or maintenance conditions and notification requirements. The schedule and policy wording remain decisive.
Educational information only. It is not personal financial advice and is subject to policy wording. Best Care’s exact legal status, authorisation and product appointments must be confirmed before publication.
Request a callback