Profile Settings: Cyber Insurance

The Cyber Insurance section, within Profile Settings, is where X-Analytics captures your organization's cyber insurance details to deliver valuable risk transfer insights.

If you have a copy of your organization's insurance policy, then this section should be easy to answer.

If you don't have a copy of your organization's insurance policy, then this support document will provide assumptions that could be used to estimate risk transfer insights.

General Policy Information

There are 3 questions within this sub-section. Just enter the values directly from your policy.

IN.0.1 Cost of Premium: either enter the cost of premium or enter $0 to keep this information private.

IN.0.2 Policy Limit: enter the policy limit.

IN.0.3 Policy Retention: enter the policy retention (or policy deductible).

Data Breach Information

There are 20 questions in this sub-section. Just enter the values and answers directly from your policy.

Question #	Question	Support Guidance
IN.1.1	a. Data Breach Insurance Sub-limit	Enter sub-limit or total limit
IN.1.2	b. Data Breach Insurance Retention (or deductible)	Enter sub-retention or total retention
IN.1.3	c. Covers forensic and investigation activites	Generally covered
IN.1.4	d. Covers assessment and audit services	Generally covered
IN.1.5	e. Covers crisis management	Generally covered
IN.1.6	f. Covers communication with regulators	Generally covered
IN.1.7	g. Covers engagement with outside experts	Generally covered
IN.1.8	h. Covers credit monitoring and ID protection services to the victims	Generally covered
IN.1.9	i. Covers regulatory fines	Generally covered
IN.1.10	j. Covers legal expenditures	Generally covered
IN.1.11	k. Covers communication with executives and board members	Generally not covered
IN.1.12	l. Covers general notices to victims, customers, etc.	Generally covered
IN.1.13	m. Covers determination of regulatory requirements	Generally not covered
IN.1.14	n. Covers helpdesk and inbound communications	Generally not covered
IN.1.15	o. Covers issuing new accounts	Generally not covered
IN.1.16	p. Covers employee time post incident	Generally not covered
IN.1.17	q. Covers product discounts post incident	Generally not covered
IN.1.18	r. Covers loss profit due to downtime	Generally not covered
IN.1.19	s. Covers cost of lost customers and/or acquiring new customers	Generally not covered
IN.1.20	t. Covers reputational loss	Generally not covered

Business Interruption Information

There are 20 questions in this sub-section. Just enter the values and answers directly from your policy.

Question #	Question	Support Guidance
IN.2.1	a. Business Interruption Insurance Sub-limit	Enter sub-limit or total limit
IN.2.2	b. Business Interruption Insurance Retention (or deductible)	Enter sub-limit value or total limit
IN.2.3	c. Business Interruption Waiting Period	Enter waiting period (>=0 hours)
IN.2.4	d. Covers DDoS attacks	Generally covered
IN.2.5	e. Covers forensic and investigation activites	Generally covered
IN.2.6	f. Covers assessment and audit services	Generally covered
IN.2.7	g. Covers crisis management	Generally covered
IN.2.8	h. Covers communication with regulators	Generally covered
IN.2.9	i. Covers engagement with outside experts	Generally covered
IN.2.10	j. Covers regulatory fines	Generally covered
IN.2.11	k. Covers legal expenditures	Generally covered
IN.2.12	l. Covers communication with executives and board members	Generally not covered
IN.2.13	m. Covers general notices to customers, partners, etc.	Generally covered
IN.2.14	n. Covers determination of regulatory requirements	Generally not covered
IN.2.15	o. Covers helpdesk and inbound communications	Generally not covered
IN.2.16	p. Covers employee time post incident	Generally not covered
IN.2.17	q. Covers product discounts post incident	Generally not covered
IN.2.18	r. Covers loss profit due to downtime	Generally covered
IN.2.19	s. Covers cost of lost customers and/or acquiring new customers	Generally not covered
IN.2.20	t. Covers reputational loss	Generally not covered

Ransomware Information

There are 21 questions in this sub-section. Just enter the values and answers directly from your policy.

Question #	Question	Support Guidance
IN.3.1	a. Ransomware Insurance Sub-limit	Enter sub-limit or total limit
IN.3.2	b. Ransomware Insurance Retention (or deductible)	Enter sub-retention or total retention
IN.3.3	c. Ransomware Waiting Period	Enter waiting period (>=0 hours)
IN.3.4	d. Ransomware Insurance Limit in regards to loss profit	Enter loss profit limit, sub-limit, or total limit
IN.3.5	e. Ransomware Insurance Limit in regards to max duration	Enter max duration limit (>=1 days), enter 30 days if you don't know.
IN.3.6	f. Covers cost of asset and data recovery	Generally covered
IN.3.7	g. Covers forensic and investigation activites	Generally covered
IN.3.8	h. Covers assessment and audit services	Generally covered
IN.3.9	i. Covers crisis management	Generally covered
IN.3.10	j. Covers communication with regulators	Generally covered
IN.3.11	k. Covers engagement with outside experts	Generally covered
IN.3.12	l. Covers regulatory fines	Generally covered
IN.3.13	m. Covers legal expenditures	Generally covered
IN.3.14	n. Covers communication with executives and board members	Generally not covered
IN.3.15	o. Covers general notices to customers, partners, etc.	Generally covered
IN.3.16	p. Covers determination of regulatory requirements	Generally not covered
IN.3.17	q. Covers helpdesk and inbound communications	Generally not covered
IN.3.18	r. Covers employee time post incident	Generally not covered
IN.3.19	s. Covers product discounts post incident	Generally not covered
IN.3.20	t. Covers cost of lost customers and/or acquiring new customers	Generally not covered
IN.3.21	u. Covers reputational loss	Generally not covered

Misappropriation Information

There are 20 questions in this sub-section. Just enter the values and answers directly from your policy.

Question #	Question	Support Guidance
IN.4.1	a. E-Crime of Theft of Intellectual Property Insurance Sub-limit	Enter sub-limit or total limit
IN.4.2	b. E-Crime of Theft of Intellectual Property Insurance Retention (or deductible)	Enter sub-retention or total retention; Special Note: if retention is higher than sub-limit, then you will revise sub-limit by adding retention and sub-limit
IN.4.3	c. Covers replacement value of stolen intellectual property	Generally not covered
IN.4.4	d. Covers replacement value of stolen funds	Generally covered
IN.4.5	e. Covers forensic and investigation activites	Generally covered
IN.4.6	f. Covers assessment and audit services	Generally covered
IN.4.7	g. Covers crisis management	Generally covered
IN.4.8	h. Covers communication with regulators	Generally covered
IN.4.9	i. Covers engagement with outside experts	Generally covered
IN.4.10	j. Covers regulatory fines	Generally covered
IN.4.11	k. Covers legal expenditures	Generally covered
IN.4.12	l. Covers communication with executives and board members	Generally not covered
IN.4.13	m. Covers general notices to victims, customers, etc.	Generally covered
IN.4.14	n. Covers determination of regulatory requirements	Generally not covered
IN.4.15	o. Covers helpdesk and inbound communications	Generally not covered
IN.4.16	p. Covers employee time post incident	Generally not covered
IN.4.17	q. Covers product discounts post incident	Generally not covered
IN.4.18	r. Covers loss profit due to downtime	Generally not covered
IN.4.19	s. Covers cost of lost customers and/or acquiring new customers	Generally not covered
IN.4.20	t. Covers reputational loss	Generally not covered

Additional Support

If you need further assistance, then please contact your Customer Success Team Member.