Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.
Insurance Questions for Physical and Cybersecurity Businesses
Which Insurance Should You Consider?
Consider general liability, professional errors and omissions (E&O), technology errors and omissions (E&O), cyber liability, and tools, equipment and inland marine. Start with the coverages tied to your day-to-day operations, then use the situations and buying questions below to compare your options.
General liability
Staff guard a site, install access controls or cameras, patrol premises or visit customer locations.
General liability can address certain bodily-injury and property-damage claims, but the actual operations and exclusions matter. Have the insurer confirm how guarding, installation and monitoring are classified.[1][7]
Ask Before Buying
Which guarding, installation, monitoring and customer-site activities are declared, and what exclusions, limits or conditions apply?
Professional errors and omissions (E&O)
Clients rely on assessments, monitoring, penetration testing, incident response or security recommendations.
Ask the insurer whether each stated security service falls within the professional-services definition and which exclusions apply.[1][2]
Ask Before Buying
Are assessment, testing, monitoring and response services listed as insured professional work, and which loss types are excluded?
Technology errors and omissions (E&O)
The company sells managed detection, security software or technology-enabled monitoring.
Chubb describes technology E&O for third-party financial injury from insured products and services in its named DigiTech ERM summary. Treat that as a product example only; ask the insurer to define services and claims under your proposed form.[6][5]
Ask Before Buying
Which products and services, third-party financial-loss claims, response commitments and customer configurations are within the quoted form?
Cyber liability
The provider holds customer credentials, logs, incident records or privileged system access.
Assess supplier and vendor-held data risks, then ask how your own policy treats them. Customer vendor-review guidance does not establish your policy’s response.[3][4]
Ask Before Buying
Does the proposed form address your own access, customer systems, vendor incidents, response, defense and interruption? Ask for definitions and exclusions.
Tools, equipment and inland marine
Cameras, sensors, test devices or tools move between storage, customer sites and installation jobs.
Ask whether movable devices should be scheduled under inland-marine wording, including each custodian, transit leg and installation stage.[7]
Ask Before Buying
Which devices, values, sites, handlers and installation or transit stages are scheduled?
Separate On-Site and Digital Services
List physical guarding, patrols, alarm monitoring, equipment installation, penetration testing, managed detection and incident response as distinct operations. Ask the insurer which activities are included in the application and which definitions or exclusions apply.[1][7]
For each contract, flag promises about response time, detection, containment, uptime or loss prevention. These commitments shape the scenario to discuss with the broker; they do not establish that a policy covers a service failure or customer loss.[5]
Document Privileged Access and Customer Data
Inventory administrator accounts, customer credentials, logs, endpoints, incident records, subprocessors and who can access each environment. FTC advises businesses to assess supplier and vendor data risks; use that as an operational checklist and ask separately how your own policy treats each scenario.[3]
Ask how the proposed forms address vendor incidents and errors in technology services, including response obligations, exclusions and sublimits. Chubb’s examples describe exposures; they do not establish your policy’s response.[5]
Account for Field Equipment and Subcontractors
Identify devices and tools that leave storage, who transports them and which customer sites receive installation or maintenance work. Ask whether the quoted property or inland-marine wording schedules the items, movement and installation stages you use.[7]
If another firm performs monitoring, installation or response work, describe its role and access to the customer environment. Ask how the contract and insurance application treat subcontracted work instead of assuming your policy automatically extends to the other firm.[1][3]
Providers to Compare by Coverage
General liability
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10
Professional errors and omissions (E&O)
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10
Technology errors and omissions (E&O)
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10Cyber liability
Alliance Risk
Spot Score
Review Score
Not enough ratings
Amelia Risk
Spot Score
Review Score
2.0/ 10Tools, equipment and inland marine
Alliance Risk
Spot Score
Review Score
Not enough ratings
Common Questions
Can one policy cover both physical guarding and cybersecurity services?
Do not assume one policy includes every operation; ask which forms and declared activities apply.[1]
Read the Full AnswerIf we have privileged customer access, does a customer’s vendor-risk review tell us what our insurance covers?
No. A customer’s vendor-risk review assesses supplier security; it does not interpret the security provider’s policy.[3]
Read the Full AnswerSources and Further Reading
- Small Business Insurance — National Association of Insurance Commissioners. BOP and exclusions; general liability and exclusions; professional liability, crime and cyber; business property. General educational descriptions, not policy terms.
- Launch Your Business: Get Business Insurance — U.S. Small Business Administration. Get business insurance and four steps to buy; general coverage categories and quote comparison guidance. Do not rely on the page’s overbroad employee insurance statement.
- Cybersecurity for Small Business — Federal Trade Commission. Supplier risk, response planning and cyber-insurance buyer questions. Educational guidance, not policy wording.
FTC cybersecurity guidance on supplier risk and policy questions.
- Cyber Insurance — Federal Trade Commission (content developed with NAIC and federal partners). First-party coverage, lines 46–77; third-party coverage, lines 78–102. Examples are not a promise for any policy.
- Technology Exposures — Chubb. Information loss, network-security failure, interruption, vendor incidents and technology-service errors; exposure examples, not a coverage determination.
Chubb risk scenarios for technology-service and vendor exposure.
- Cyber Insurance Coverage and Products — Chubb. DigiTech Enterprise Risk Management product description; Chubb’s named product summary describes technology E&O for third-party financial injury arising from insured products and services. Product-specific summary, not a universal definition or buyer policy form.
- Commercial Insurance Guide — California Department of Insurance. Revised June 14, 2024; commercial property, inland marine, boiler and machinery/equipment breakdown, commercial general liability, commercial auto, umbrella, and workers compensation. California-focused guidance; confirm other jurisdictions and actual policy wording.
California-focused reference for commercial liability, property and inland-marine topics; confirm terms and requirements where the business operates.
Spot, a product of Tools for Enlightenment, publishes this guide and works in the commercial insurance market. This is general buyer education; policy terms and state-specific obligations determine coverage and requirements.
Updated 2026-09-28. Editorial Policy
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.