Cyber Insurance: What It Actually Covers (And What Voids It)
Most businesses find out what their policy really covers at the worst possible moment. What it costs, what it genuinely pays for, what it never pays for, and the declarations that quietly void the whole claim.
The short version
- Typical UK SME cover: roughly £1,500–£4,000 a year for £1m, and your security controls move that number
- The incident response team is usually worth more than the payout — on day one you don't know who to ring
- Commonly excluded: your own hardware, lost future business, known unfixed vulnerabilities, unsupported operating systems
- What you declared (MFA, tested backups, patching, an IR plan) is a warranty — one untrue answer can void the claim