What Does Cyber Insurance Cover?
Cyber insurance can cover selected response costs and liability claims after a covered cyber incident. The policy’s definitions, limits, exclusions, and conditions control.
Cyber insurance commonly combines first-party protection for the business’s own covered costs with third-party protection for covered claims brought by others. FTC guidance lists examples such as forensic investigation, customer notification, data recovery, lost income from a covered interruption, cyber extortion, legal defense, and settlements. The menu differs by policy: an example list is not a promise that every form includes every item.
Read the quote’s insuring agreements and definitions to see which events trigger each section, whether vendors’ systems count, and whether coverage is claims-made or event-based. Compare each limit, sublimit, retention, waiting period, consent requirement, and exclusion. The attached AIG specimen is an illustration only; it is not a substitute for the issued policy.
Related Coverage
Providers That List This Coverage
Sources
- Cyber Insurance. Federal Trade Commission; What Should Your Cyber Insurance Policy Cover; First-Party Coverage; Third-Party Coverage. Accessed 2026-09-25.
- CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §§1–3, PDF pp.11, 14–18; Event Management §§1–2, PDF pp.19–20. Accessed 2026-09-25.
- Cyber insurance: a key part of a robust business strategy. Insurance Information Institute; What are the types of cyber insurance coverage?; What isn’t covered by cyber insurance?; Is cyber insurance affordable?; How much cybersecurity coverage do businesses need? Accessed 2026-09-25.





