CNA Small Business Insurance: Products, Agents and Service
CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. 1,2,3
What Is Marsh?
Marsh suits technology and larger businesses seeking specialist cyber placement or broad global risk advice; small firms wanting a quick standard quote should compare its MMA route or digital agencies. 5,6,7,8
What Is Cyber Insurance?
Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. 13,14
What Are the Key Differences Between CNA and Marsh Cyber Insurance?
Excess Capacity and Base Product
Marsh says Cyber ECHO is an excess facility that may provide more than $200 million of capacity per client, with a free first reinstatement and paid second reinstatement for separate events in a policy year. CNA’s selected claim describes Epack 3 and EPS Plus product contexts. Because these descriptions concern different placement structures, ask what underlying coverage and attachment point Cyber ECHO requires before comparing schedules. 10 4
Placement and Claims Support
Marsh describes brokerage and claims advocacy, including litigation support and proof-of-loss work with forensic accountants. CNA identifies CyberAssist and an incident-response vendor panel. The service descriptions name different support activities; confirm the specific team, insurer contacts and services attached to each placement. 11 4
What Should You Confirm in CNA and Marsh Cyber Insurance Quotes?
CNA and Marsh Review Scores for 2026
These averages can combine ratings for different products, locations, and customer groups, including approximate BBB grade conversions. Read each review for the sources, scope, and calculation.
CNA Review Score
Review Score
1 rated source
Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.[1][5]
Read CNA reviewsMarsh Review Score
Review Score
2 rated sources
Marsh’s global Trustpilot profile has a poor 1.3/5 score. Treat it as a service warning to investigate with your proposed team; it does not isolate US commercial accounts.[2][4][7]
Read Marsh reviewsCNA vs Marsh Cyber Insurance Compared
CNA vs Marsh: Cyber Insurance: documented features by provider
| Criteria | CNA Cyber Insurance | Marsh Cyber Insurance Brokerage |
|---|---|---|
| Role in This Line | Confirm in your quote. | Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. 9Company-reported. Marsh corporate cyber insurance product page. Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. 12Company-reported. MMA cyber solutions page. |
| Issuing Insurer | Confirm in your quote. | The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. 10Not publicly disclosed. Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places. |
| Who It’s For | CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. | MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. 12Company-reported. MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally. |
| Coverage Features | Confirm in your quote. | MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. 12Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement. |
| Limits and Retentions | Confirm in your quote. | Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. 10Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit. |
| Risk Services | CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. | Confirm in your quote. |
| How to Apply | Confirm in your quote. | You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. 9,12Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders. |
| Claims Support | Confirm in your quote. | Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. 11Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified. |
Related Pages for CNA vs Marsh Cyber Insurance
Cyber Insurance Pages for CNA and Marsh
Other Coverage Lines Compared for CNA vs Marsh
Other Cyber Insurance Provider Comparisons
Sources for CNA vs Marsh Cyber Insurance
Sources About CNA
- Insurance for Small Businesses. CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark). Accessed 2026-09-28.
- CNA Connect Small Businessowners Policy (BOP) | CNA Insurance. CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
- General Disclaimer. CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29. Accessed 2026-09-29.
- Cyber Insurance - Cyber Risk Solutions | CNA Insurance. CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.
Sources About Marsh
- Marsh | Leader in risk, strategy, people, and investments. Marsh; Hero and capability tiles; FAQ: What does Marsh do?; industries served; Is Marsh the same as Marsh McLennan? January 2026 brand change. Accessed 2026-09-16.
- Compensation guide for US clients. Marsh; US broking segments; broker role; retail commissions, client fees, wholesale, insurer consulting, contingent and supplemental commissions; Marsh LLC and Marsh USA LLC; page 3: broker role and Marsh & McLennan Agency segment; page 7: copyright © 2024 Marsh LLC. Accessed 2026-09-16.
- Marsh McLennan Agency (MMA). Marsh; Middle-market US organizations; wholly-owned subsidiary; business insurance, employee health and benefits, retirement, private client. Accessed 2026-09-16.
- Technology | Insurance Broking & Risk Management. Marsh; Opening Technology Practice description; practice links including data center insurance, fintech and Stratus; Talk to us. Accessed 2026-09-16.
- Cyber Insurance. Marsh; Opening brokerage positioning; products list including Cyber Pathway, Cyber Accelerate, Claims Advocacy, CyberPort, Cyber ECHO; Rachel Lavender, US and Canada Cyber Brokerage Leader. Accessed 2026-09-23.
- Cyber ECHO. Marsh; New for 2026: over $200 million capacity; free first reinstatement and paid second reinstatement; one underwriting lead and two claims leads per panel; Lloyd's, company markets or Bermuda-based insurers. Accessed 2026-09-23.
- Claims Advocacy. Marsh; Global claims specialists negotiating cyber coverage issues; proof of loss with forensic accountants. Accessed 2026-09-23.
- Cyber Insurance | MMA. Marsh McLennan Agency; Benefits of Cyber: understand, mitigate, respond, recover; Cyber Coverage list (incident investigation and response, network interruption, extortion/ransomware, data restoration, security and privacy liability, additional coverages); FAQ: Who needs cyber insurance coverage? Accessed 2026-09-23.
Sources for the Cyber Insurance Guide
- Cyber Insurance. Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
- CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.
