CFC vs WTW: How Do They Compare for Cyber Insurance?

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ⁵Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

Under WTW's North American Corporate Risk & Broking terms, WTW normally acts as the client's insurance intermediary for engagements governed by those terms. ¹⁴Company-reported. Terms for applicable North American Corporate Risk & Broking engagements. WTW also discloses separate insurer-side services in some arrangements; this does not determine the role in a specific engagement.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^8,4Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

The reviewed WTW sources do not identify an issuing insurer for a specific cyber placement. ^14,13,10Not publicly disclosed. This is a gap in the cited marketing, annual-report, and brokerage materials; it does not mean WTW lacks insurer markets. Confirm the carrier on the quote and issued policy.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ⁵Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

Confirm in your quote.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ⁵Company-reported. Cyber product page Key features list for Cyber Proactive Response.

WTW's FY2024 annual report lists cyber insurance among FINEX solutions; its Digital Infrastructure Protector describes cyber protection as one part of a broader data-center solution. ^13,10Company-reported. Historical group-level FINEX capability and a separately scoped data-center solution; neither source establishes current standalone cyber terms or eligibility.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ⁵Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

The reviewed sources do not state a buyer-specific cyber limit, retention, or deductible. ^14,13,10Not publicly disclosed. No limit or deductible is inferred from general marketing or WTW's brokerage role; the insurer's quote and issued forms control.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^6,7Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

WTW's North American terms describe reviewing binders, policies, and endorsements against the terms negotiated with the insurer. ¹⁴Company-reported. Broker document-review process under the cited terms, when WTW handles this line's placement. It does not certify that a policy covers a claim or replace the issued wording.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ⁸Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

WTW's North American terms say an insurer quote is not confirmation of coverage; if the client orders binding, WTW seeks a formal insurer commitment, typically a binder. ¹⁴Company-reported. Applies to placements governed by the cited North American Corporate Risk & Broking terms. It does not establish a self-service quote route or promise coverage availability for this line.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ⁷Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.

Confirm in your quote.