CNA vs Lockton: How Do They Compare for Cyber Insurance?

CNA says CyberAssist gives policyholders tools and specialists to identify vulnerabilities and strengthen defenses; Lockton describes cybersecurity-posture reviews and help designing security governance. For incident preparation, Lockton runs response exercises while CNA identifies breach coaches, forensic firms and notification vendors. 4,8

CNA Small Business Insurance: Products, Agents and Service

CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. 1,2,3

Read the CNA profile

What Is Lockton?

Lockton suits technology companies and larger businesses seeking a broker across cyber, D&O, property, liability and benefits; small firms wanting an instant standard quote should compare digital agencies. 5,6,7

Read the Lockton profile

Read the Lockton Cyber Insurance page

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. 9,10

Read the full coverage guide

Key Differences in Cyber Insurance

Security Review and Vulnerability Work

Lockton's Cyber & Technology team says it reviews a client's security posture and helps develop governance frameworks and cyber-hygiene policies. CNA describes CyberAssist as policyholder tools, services and cybersecurity specialists for identifying vulnerabilities and strengthening defenses. Both address preparation before a cyber event, but one is described as advisory work by the brokerage team and the other as resources available to policyholders. Ask who performs the review and what deliverables your engagement includes. 8 4

Incident Readiness

Lockton says its cyber team runs incident-response exercises. CNA's cyber page identifies breach coaches, forensic firms and notification or call-center vendors for response. An exercise helps a team rehearse its plan; named response specialties identify the kinds of professionals available after an incident. These are different parts of readiness, so confirm whether the Lockton exercise is included in the engagement and which CNA vendors and services apply to the quoted policy. 8 4

What to Confirm in Cyber Insurance Quotes

  • Ask Lockton which security review, governance recommendations and exercise deliverables are included; ask CNA which CyberAssist tools are available to policyholders and how to access them. 8 4
  • Request CNA's response-vendor process and compare it with Lockton's exercise scope, including who participates, what incident scenarios are rehearsed and any separate fees. 4 8

CNA and Lockton Review Scores for 2026

These averages can combine ratings for different products, locations, and customer groups, including approximate BBB grade conversions. Read each review for the sources, scope, and calculation.

CNA Review Score

9.0/ 10

Review Score

1 rated source

Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.[1][5]

Read CNA reviews

Lockton Review Score

8.4/ 10

Review Score

3 rated sources

Lockton’s reviews vary by office and entity. Local Google-derived ratings provide some service feedback, but no reliable firmwide verdict.[2][6][7][8]

Read Lockton reviews

CNA vs Lockton Cyber Insurance Compared

CNA vs Lockton: Cyber Insurance: documented features by provider

CriteriaCNA Cyber InsuranceLockton Cyber & Technology Insurance Brokerage
Role in This Line

Confirm in your quote.

Lockton brokers cyber insurance and pairs placement with its own risk-management advice under a three-step Inform, Improve, Insure approach: quantifying cyber financial exposure, recommending security improvements, then negotiating coverage terms with insurers. 8Company-reported. Cyber & Technology product page as read 2026-09-23.

Issuing Insurer

Confirm in your quote.

Lockton says it has built alliances with cybersecurity firms and insurer partners, but the reviewed pages do not name specific cyber insurers or which carrier would issue a given client's policy. 8Not publicly disclosed. Cyber & Technology page checked 2026-09-23.

Who It’s For

CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

Lockton's technology practice says it works with clients in electronic hardware, information technology, internet, medical equipment, semiconductors, software and telecommunications, and highlights cyber liability as a core exposure for those industries. 6Company-reported. Technology industry page as read 2026-09-23. No minimum company size or revenue threshold was published.

Risk Services

CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

Lockton describes services beyond placement: reviewing a client's cybersecurity posture, running incident-response exercises, and helping design security governance frameworks and cyber-hygiene policies, delivered by a team it says has over 100 Associates specializing in cyber risk. 8Company-reported. Cyber & Technology product page as read 2026-09-23.

How to Apply

Confirm in your quote.

The Cyber & Technology page lists a named contact (its EVP, U.S. Cyber & Technology Leader) and the email cyber@lockton.com as the way to reach the team, rather than a self-serve online quote tool. 8Company-reported. Cyber & Technology page as read 2026-09-23.

Related Pages for CNA vs Lockton Cyber Insurance

Cyber Insurance Pages for CNA and Lockton

Other Coverage Lines Compared for CNA vs Lockton

Other Cyber Insurance Provider Comparisons

Sources for CNA vs Lockton Cyber Insurance

Sources About CNA

  1. Insurance for Small Businesses. CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark). Accessed 2026-09-28.
  2. CNA Connect Small Businessowners Policy (BOP) | CNA Insurance. CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
  3. General Disclaimer. CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29. Accessed 2026-09-29.
  4. Cyber Insurance - Cyber Risk Solutions | CNA Insurance. CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.

Sources About Lockton

  1. Lockton United States. Lockton; Opening description of independent insurance brokerage for risk, benefits and retirement; Ask an Expert link to contact-us. Accessed 2026-09-16.
  2. Technology. Lockton; Unique expertise in Cyber Liability; industries served (electronic hardware, information technology, internet, medical equipment, semiconductors, software, telecommunications). Accessed 2026-09-23.
  3. US Terms of Business. Lockton; Opening entity definition; Surplus Lines; Use of a Particular Insurer; Compensation Disclosure; servicing, claims handling and renewal language in Confidentiality section; Intermediaries. Accessed 2026-09-16.
  4. Cyber & Technology. Lockton; A Custom Approach; The Lockton Difference; Inform, Improve, and Insure three-step approach; team of over 100 Associates; contact cyber@lockton.com. Accessed 2026-09-23.

Sources for the Cyber Insurance Guide

  1. Cyber Insurance. Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
  2. CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.

Updated . Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. Editorial policy. To suggest a correction, contact Spot with the page URL and supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.

Talk to Spot