Marsh vs USI Insurance Services Cyber Insurance

Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. ⁵Company-reported. Marsh corporate cyber insurance product page.

Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. ⁸Company-reported. MMA cyber solutions page.

USI is a broker, not an insurer, for cyber coverage. It places cyber and privacy liability policies for clients and layers on its own manuscripted program, PrivaSafe, rather than underwriting the risk itself. ^12,10Company-reported. PrivaSafe program page and USI's property & casualty and technology practice pages.

The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. ⁶Not publicly disclosed. Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places.

USI does not name the insurer that issues PrivaSafe or other cyber policies on the pages reviewed. PrivaSafe is described as a manuscripted (custom-drafted) coverage form that USI negotiates with the market, so the carrier varies by placement. ¹²Not publicly disclosed. PrivaSafe program page as read on 2026-09-23; no dedicated cyber carrier list was found.

MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. ⁸Company-reported. MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally.

USI markets PrivaSafe to middle-market firms, saying they are particularly vulnerable to cyber events because they have limited in-house access to security expertise. The page also says any business that gathers personal or health information, manages a network, or accepts electronic payments is a potential target. ¹²Company-reported. Program page marketing description, not an underwriting appetite statement.

MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. ⁸Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement.

USI describes PrivaSafe as covering three areas: liability costs (including inability to protect information and related tort liability), compliance and corrective costs (data breach and forensic costs, privacy regulatory costs, payment-card standards), and direct costs (network interruption, data reconstruction, cyber extortion, bricking, voluntary shutdown, reputational harm business interruption, and cyber crime). ¹²Company-reported. PrivaSafe program page; actual insuring agreements and exclusions are set by the issued policy form.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. ⁶Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit.

USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ¹²Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.

Not described in the reviewed sources.

USI says PrivaSafe includes pre-breach services to help avoid cyber threats and post-breach services designed to streamline incident response and recovery, on top of USI's general property & casualty cyber specialists. ^12,13Company-reported. Program page and property-casualty practice team description.

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. ^5,8Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders.

To review cyber exposure with USI, the program page says a buyer should be ready to provide current cyber policies (if any), an assessment of its largest financial and operational cyber vulnerabilities, and its most recent audited financials. ¹²Company-reported. PrivaSafe program page intake description.

Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. ⁷Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified.

Not described in the reviewed sources.