Cyber insurance remains an area of growth opportunity for property and casualty insurers, particularly in the face of large-scale risk factors.
According to a new report, “ from Risk Placement Services (RPS), insurtechs, MGA startups, and other new players are creating a lot of extra capacity in the market, while some existing carriers are loosening underwriting standards to maintain market share.
“Those markets that were previously only offering a $1 million or a $2 million limit have since gone to $5 million,” said RPS National Cyber Practice Leader Steve Robinson in the new report. Widespread premium reductions and additional capacity are still defining the market, with limit availability increasing, even as risks become more prominent, he added.
“We’re seeing more now that can do $10 million and even some at $15 million, and that’s reflective of the capacity,” Robinson said. “A lot of carriers are trying to get creative so they don’t lose premium or market share by offering products that are of greater value.”
According to Jack Rosen, RPS area assistant vice president, the market will remain unsettled until the next wave of consolidation reduces the number of carriers. Inconsistencies in carrier approaches, especially in handling claims adjudication and methodologies employed for pricing risk, also contribute to the potential for lingering volatility.
“Premiums today are so low that you’re seeing $100,000 or $200,000 claims on policies with a $5,000 premium,” Rosen said in the report. “And many claims are not necessarily traditional data loss claims but financial-related incidents like social engineering fraud and invoice manipulation, all involving insureds inadvertently sending money to bad actors. They’re being fooled into who they’re sending their money to, and it is turning into larger and larger claims.”
In response to the evolving threat landscape, carriers are adapting services to increasingly offer preventative resources like training, risk assessments and security tool access.
Carriers are also adjusting the wording in their policies to consider increased vendor risk and guard against AI as an attack vector source for both privacy and security liability, as well as cybercrime. There are signs of a more stable, maturing cyber market, reflected in more consistent policy wording and offerings among carriers.
“The insurance community in general has played a major role in moving the needle in the right direction in terms of organizations’ cyber readiness,” Robinson says. “That’s because now there are requirements for basic data hygiene, information security practices, policies and procedures that need to be in place to even qualify for cyber insurance. That’s had a very positive effect on the maturation of businesses and organizations in general to be ready for these types of threats.”
“As cyber has increasingly become commoditized, and there’s more parity in coverages, I’m finding that it’s harder for non-specialist agents to differentiate between carriers,” Rosen added. “This is a mature product line now, unlike before when individual companies would have something new and novel to offer.
“But now, with everyone in the market offering cyber coverage, how do you compete? It’s still somewhat of a race to the bottom on price.”
Topics Cyber
Was this article valuable?
Here are more articles you may enjoy.