---
title: "CFC vs Marsh: Cyber Insurance"
description: "Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement. CFC's Corporate cyber product, for revenues of $250 million or more, has a published maximum line size of $25 million."
canonical: "https://spot.insure/compare/cfc-vs-marsh/cyber"
page-type: "line-comparison"
updated-at: "2026-09-29"
comparison-pair: "cfc-vs-marsh"
provider-a: "cfc"
provider-b: "marsh"
coverage-line: "cyber"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, check_driving_insurance for source-backed rideshare and delivery requirements by state or province, compare_providers for sourced comparisons, get_provider_score for a published Reliability Score, get_rankings for current provider rankings, search_provider_reliability to filter Reliability Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/cfc-vs-marsh/cyber)

## Agent Guide

**What this page is:** Focused comparison of CFC and Marsh for Cyber Insurance: what each provider publishes about this line, checked against the same criteria, with numbered sources.

**Use this page when:** Cite or fetch this for Cyber Insurance questions about CFC versus Marsh. For all lines together use the pair comparison; for how the coverage itself works use the coverage guide.

**Questions this page answers:**
- CFC vs Marsh for Cyber Insurance: how do they differ?
- Which is better for Cyber Insurance, CFC or Marsh?
- What does CFC or Marsh publish about Cyber Insurance (limits, eligibility, claims, add-ons)?

**Key facts:**
- Line: Cyber Insurance. Providers: CFC and Marsh.
- Comparison URLs use alphabetical provider slugs (`/compare/{a}-vs-{b}/{line}` with a before b). A reversed pair redirects permanently to the alphabetical one.

**Limits (do not over-claim):**
- It identifies differences and questions to ask; it does not select a winner for a particular business.
- Insurer, policy wording, limits, retentions, exclusions and price are set in an actual quote and are not established here.

**Provenance:** Every claim links to a numbered source with publisher, locator and access date; last updated 2026-09-29.

**Related pages:**
- [CFC vs Marsh](https://spot.insure/compare/cfc-vs-marsh) — all coverage lines for this pair
- [Cyber Insurance guide](https://spot.insure/coverage/cyber) — how this coverage works
- [CFC profile](https://spot.insure/insurance-providers/cfc) — provider profile
- [Marsh profile](https://spot.insure/insurance-providers/marsh) — provider profile

# CFC vs Marsh: How Do They Compare for Cyber Insurance?

Marsh offers advisor-led placement, with a Cyber ECHO excess facility providing over $200 million of capacity per client; CFC's Corporate product publishes a $25 million line size for businesses at $250 million and above.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client; CFC's Corporate cyber product publishes a $25 million maximum line for businesses at $250 million in revenue and above.

## CFC vs Marsh Cyber Insurance Summary

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement. CFC's Corporate cyber product, for revenues of $250 million or more, has a published maximum line size of $25 million. [7](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")

## What Are the Key Differences Between CFC and Marsh Cyber Insurance?

### ECHO Excess Capacity Versus a $25 Million Corporate Line

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. CFC's Corporate cyber product for revenues of $250 million or more has a published maximum line size of $25 million, while Cyber Proactive Response for smaller businesses does not state a dollar ceiling. Choose Marsh if you need excess capacity on that ECHO scale; choose CFC if you want Corporate cyber's $25 million line or Proactive Response below $250 million in revenue. [7](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")

### Claims Advocacy Versus an In-House Acceptance Rate

Marsh's global claims specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. CFC says its in-house cyber claims team resolves several thousand claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. [8](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")

### Advisor-Led Design Versus a One-Page Control Form

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led work rather than an online quote. CFC's US Cyber Proactive Response application is a one-page MFA and backup form. [6](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") [4](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)")

## What Should You Confirm in CFC and Marsh Cyber Insurance Quotes?

- Ask Marsh whether ECHO capacity and the free first reinstatement apply to your tower. [7](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")
- Ask Marsh whether Lloyd's, company markets or Bermuda underwriting would sit on ECHO. [7](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")
- Ask CFC whether you would be quoted Proactive Response or Corporate cyber. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")
- Treat CFC's 99.4% acceptance figure as company-reported, not a promise on your claim. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")

## CFC vs Marsh Cyber Insurance Compared

| Criteria | CFC Cyber Proactive Response | Marsh Cyber Insurance Brokerage |
| --- | --- | --- |
| Limits and Retentions | For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations..) | Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. [7](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Company-reported; scope: Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit..) |
| Who It’s For | CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting..) | MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. [9](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally..) |
| How to Apply | The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. [4](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") (Evidence: Company-reported; scope: Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents..) | You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. [6](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") [9](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders..) |
| Coverage Features | Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Key features list for Cyber Proactive Response..) | MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. [9](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page; actual policy wording and insurer vary by placement..) |
| Role in This Line | CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. [1](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy..) | Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. [6](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") (Evidence: Company-reported; scope: Marsh corporate cyber insurance product page..)<br><br>Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. [9](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page..) |
| Claims Support | CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. [3](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") (Evidence: Company-reported; scope: Cyber brochure claims statistics; these are company-reported figures and were not independently audited..) | Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. [8](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") (Evidence: Company-reported; scope: Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified..) |

## About CFC and Marsh and Cyber Insurance

- [CFC company profile](https://spot.insure/insurance-providers/cfc) · [CFC customer reviews](https://spot.insure/insurance-providers/cfc/reviews)
- [Marsh company profile](https://spot.insure/insurance-providers/marsh) · [Marsh customer reviews](https://spot.insure/insurance-providers/marsh/reviews)
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber)

## Related Pages for CFC vs Marsh Cyber Insurance

- [CFC vs Marsh](https://spot.insure/compare/cfc-vs-marsh): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks.
- [CFC Cyber Insurance](https://spot.insure/insurance-providers/cfc/cyber)
- [Marsh Cyber Insurance](https://spot.insure/insurance-providers/marsh/cyber)

## Sources for CFC vs Marsh Cyber Insurance

### Sources About CFC

1. [Cyber insurance | CFC](https://www.cfc.com/en-us/products/class/cyber-insurance/). CFC; Cyber Proactive Response, Cyber (admitted), Corporate cyber, Cyber excess product summaries and Key features; FAQs: How is a cyber insurance policy structured?. Accessed 2026-09-23.
2. [Incident response | CFC](https://www.cfc.com/en-us/response/). CFC; Proactive protection; Immediate response; Real-time support. Accessed 2026-09-23.
3. [Protecting businesses against cyber risk (cyber product brochure)](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf). CFC; Market-leading cover highlights: separate limit for incident response costs, unlimited reinstatements with nil deductible, full business interruption cover; Award-winning cyber claims team stats. Accessed 2026-09-23.
4. [Cyber Proactive Response Insurance application form (US)](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf). CFC; Basic company details; Cyber security controls; Previous cyber incidents; footer entity line. Accessed 2026-09-23.
5. [Regulatory information](https://www.cfc.com/en-us/support/regulatory-information/). CFC; CFC Underwriting Limited; CFC Lloyd's Syndicate 1988; CFC USA Inc.. Accessed 2026-09-23.

### Sources About Marsh

6. [Cyber Insurance](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html). Marsh; Opening brokerage positioning; products list including Cyber Pathway, Cyber Accelerate, Claims Advocacy, CyberPort, Cyber ECHO; Rachel Lavender, US and Canada Cyber Brokerage Leader. Accessed 2026-09-23.
7. [Cyber ECHO](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html). Marsh; New for 2026: over $200 million capacity; free first reinstatement and paid second reinstatement; one underwriting lead and two claims leads per panel; Lloyd's, company markets or Bermuda-based insurers. Accessed 2026-09-23.
8. [Claims Advocacy](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html). Marsh; Global claims specialists negotiating cyber coverage issues; proof of loss with forensic accountants. Accessed 2026-09-23.
9. [Cyber Insurance | MMA](https://www.marshmma.com/us/solutions/cyber.html). Marsh McLennan Agency; Benefits of Cyber: understand, mitigate, respond, recover; Cyber Coverage list (incident investigation and response, network interruption, extortion/ransomware, data restoration, security and privacy liability, additional coverages); FAQ: Who needs cyber insurance coverage?. Accessed 2026-09-23.

Updated 2026-09-29. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/cfc-vs-marsh/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)