What cyber insurance covers
Cyber insurance covers the costs that follow a cyber incident — ransomware, hacking, data breach, staff error. Good policies work in two directions: first-party costs (incident response specialists, data restoration, business interruption while systems are down, ransom negotiation where lawful) and third-party liability (claims from customers whose data leaked, regulatory defence, notification costs).
The most valuable feature is usually the incident response line: 24/7 access to forensic, legal and PR specialists who take over in the first hours of an attack — capability almost no small business holds in-house.
Who needs it?
Any business that would struggle without its systems for a week, holds customer data, takes card payments, or depends on email for instructions. Attackers automate — small firms aren't beneath notice, they're the easy volume. Sectors handling sensitive data (health, legal, finance, e-commerce) and firms whose clients demand cyber cover in contracts have the clearest need.
What it doesn't cover
Common exclusions: incidents predating the policy, failures to maintain basic security you declared you had (untrue application answers void claims), improvement costs to build better systems than before, and fraud where staff are tricked into paying invoices — social-engineering/funds-transfer fraud often needs a specific extension, so check it's included rather than assumed.
The security basics insurers expect
Insurers increasingly require minimum hygiene before covering you — and price better when you exceed it: multi-factor authentication on email and remote access, tested offline backups, patched systems, and staff phishing awareness. These controls both cut premiums and stop most incidents happening at all.
Getting the right policy
Match the limit to a realistic worst week — downtime cost plus data liabilities — and confirm business interruption and social engineering are in. A specialist broker will compare wordings, which differ more in cyber than almost any other line. Find a business insurance specialist through Nesto — free, no obligation.