Cyber Insurance for Small Businesses: Coverage Questions

Consider what customer, employee, or payment information you handle, which vendors support your systems, and what operations would be interrupted if a system became unavailable. This context helps identify questions to ask when comparing coverage.

Compare covered events, exclusions, waiting periods, sublimits, notification requirements, and any approved-provider or consent provisions. Ask how the policy treats restoration, interruption, extortion, and third-party claims rather than assuming every incident is covered.

Maintain backups, access controls, staff procedures, and an incident contact plan. Read the policy and follow its notice requirements if an incident occurs. Coverage and response costs depend on the policy, carrier, and circumstances.