Aon vs Marsh: How Do They Compare for Cyber Insurance?

Aon describes cyber insurance brokerage and risk-advisory services. It is not identified as the risk-bearing insurer, and the global page does not name the carrier for a particular placement. ³Company-reported. Aon’s official global product/capability page. The statement is limited to Aon’s marketing of brokerage or advisory services, not policy issuance.

Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. ⁸Company-reported. Marsh corporate cyber insurance product page.

Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. ¹¹Company-reported. MMA cyber solutions page.

The reviewed page does not identify the insurer or the legal producing entity for a specific placement. Ask Aon to identify both for the quoted risk. ³Not found in reviewed sources. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote, binder or policy was reviewed. This does not establish that no insurer or producing entity is available.

The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. ⁹Not publicly disclosed. Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places.

Aon describes cyber services for organizations managing cyber risk. Its global practice page does not publish a complete industry, revenue, security-control or state-by-state eligibility schedule. ³Company-reported. Audience stated by Aon on its global capability page; this does not establish a specific applicant’s eligibility or placement availability by U.S. state.

MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. ¹¹Company-reported. MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally.

Aon describes cyber insurance as one part of cyber risk financing and says it reviews policy offerings because terms and conditions vary. For professional-services firms, it discusses coordinating cyber and professional-liability coverage. This is brokerage guidance and does not establish the terms of any cyber policy. ³Company-reported. Aon’s broker-authored explanation of the insurance line. It does not establish an individual insured’s policy entitlement; the insurer’s form, endorsements and declarations control.

MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. ¹¹Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement.

The reviewed page does not state a standard buyer-specific limit, retention or deductible for this placement. Confirm amounts, sublimits and conditions in the quote and issued policy. ³Not publicly disclosed. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote or policy form was reviewed.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. ⁹Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit.

Aon describes cyber claims advocacy and preparation and relationships with third-party incident-response providers. The retained official source notes that provider contracts are separate, no performance guarantee is made, and referral remuneration may occur; confirm the providers, scope and compensation applicable to a client. ³Company-reported. Company-reported brokerage and advisory services. Account-specific service terms are not stated.

Confirm in your quote.

Confirm in your quote.

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. ^8,11Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders.

Confirm in your quote.

Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. ¹⁰Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified.