How to choose the right cyber insurance coverage.

Protection, prevention and peace of mind should be at the core of every good cyber insurance policy.

The right cyber insurance makes all the difference.

Not all cyber insurance policies are the same. The differences between cyber policies can greatly impact your claims and your overall safety. Not having the right cyber insurance coverage can leave you or your business exposed to unnecessary risks or on the hook for unexpected costs. 

It’s critical to find a cyber insurance policy that reduces cyber risks and keeps your digital assets safe. Having a comprehensive and proactive cyber policy ensures protection from growing and evolving digital risks with additional breach response services.

What to look for when choosing a cyber insurance policy.

Making an informed choice about cyber insurance often depends on the wording of the cyber policy. Here are some of the items to look for and ask about when comparing policies.

What does cyber insurance cover?

Cyber insurance coverage varies between the policy and the provider. The most basic cyber insurance coverage simply helps to offset the costs related to online fraud, identity theft or cyber extortion. 

In today’s complex digital environment, effective cyber coverage needs to go beyond just covering losses. It should also provide personalized support to help you or your business recover quickly and completely by providing ID or hardware restoration services, ransom negotiations, counselling for any trauma related to the incident as well as coverages and access to experts for legal or recovery costs. 

The best cyber insurance policies will offer preventive tools, resources and technical expertise to prevent threats and protect your digital assets from being at risk in the first place.

Cyber insurance services and coverage

Business cyber insurance coverage

Businesses of all sizes are increasingly exposed to cyber threats and the fallout costs are adding up. If you have limited cyber security protection, it’s critical to get comprehensive cyber coverage that covers a range of financial and operational losses. 

Here are some cyber services and coverages you should consider for your business:

Breach response

Breach response experts will contain the cyber incident and re-secure your network if needed. No claim necessary.

Hacker damages

Costs to repair, replace or restore websites or electronic data.

Insider threats

Damages that result from malicious acts by an employee to either yours or any third-party system.

Cyber deception

Money wrongly transmitted to a third-party from a deception scheme, also known as social engineering.

Reputation damage

Coverage to help you manage your reputation following a cyber breach or attack.

Loss of business

Lost profits if a cyber incident interrupts your business operations.

Legal and regulatory costs

Legal costs due to regulatory fines or requirements to notify customers.

Third-party liability

Costs associated with claims against you for a breach of any privacy law with respect to protection of third-party data.

Online and media liability

Protection if your online content infringes on someone's IP rights including defamation, libel and slander.

Bricking costs

Costs to replace damages to your hardware, in addition to replacement and recovery of data.

Cyber services to data breach victims

Costs of services to affected individuals including ID restoration management and additional services.

Notification costs

Costs to provide notification of a data breach to affected individuals.

Why small businesses need cyber insurance

Learn more about the common cyber threats facing small businesses and which cyber coverage can best protect your assets.

Personal cyber insurance coverage

Personal cyber insurance policies generally cover common risks, such as identity theft, online extortion and online financial fraud.

When choosing a policy for your home or family, here are some of the services and coverage items you should look out for:

Breach response

Breach response experts will contain the cyber incident and re-secure your network if needed. No claim necessary.

Hacker damages

Costs to repair, replace or restore websites or electronic data as a result of a cyber attack.

IoT devices

Costs to repair, replace or restore IoT devies as a result of a cyber attack.

Systems recovery

Costs to repair, replace or restore personal systems as a result of a cyber attack.

Cyberbullying

Covers losses resulting from cyberbullying, including professional cybersecurity consultation and cyber trauma costs.

Cyber deception

Loss of money wrongly transmitted or paid to a third-party from an online scam, also known as social engineering.

Identity theft

Direct financial loss to an insured caused by identity theft.

Cyber extortion

Professional assistance to respond to a ransomware attack and payment of ransom when approved up to the sublimit.

Forensic review

Forensic costs associated with a data breach involving Personally Identifiable Information.

Legal review

Legal review costs due to a data breach involving Personally Identifiable Information.

Services to data breach victims

Costs of services to affected individuals including ID restoration management and additional services.

Notification costs

Costs to provide notification of a data breach to affected individuals.

Demystifying personal cyber insurance

Watch the webinar to learn more about personal cyber insurance coverage.

What’s not covered by cyber insurance?

Like any other type of insurance, cyber insurance has limitations and exclusions. Most often,  leaving out certain risks like intentional misconduct, known vulnerabilities or business losses that are difficult to quantify, like future profits.

If you’re concerned about coverage for a specific risk, it’s a good idea to review your policy’s terms and conditions or speak to your Broker to understand what’s not covered and how it could impact you.

FIRESIDE CHAT

The Evolution of Fraud: The Credit Union Perspective

Speakers: Mike Burgener, Jim Hand

This fireside chat with Canada’s largest credit union will cover how personal and commercial fraud have evolved. Jim and Mike will dissect how Vancity is addressing fraud and the most common types of fraud they encounter. They’ll also highlight how Vancity is innovating to detect, prevent and notify clients about fraud from the back end to the front-line. They’ll finish off by taking an in-depth view of what a typical fraud recovery process looks like and the role insurance programs can play in distributing cyber at scale through affinity channels. 

KEYNOTE

The Future of Underwriting & Broker Workflows

Speakers: Erik Tifft, Neal Jardine

The days of manual submissions may be in the rearview mirror for most brokers as mature specialty markets are headed towards APIs and rapid quoting. Our Head of Global Underwriting will showcase to brokers how technology is now able to provide cyber quotes in seconds – saving brokers and clients time. Neal will join the session to take brokers through a sneak peek of the new BOXX underwriting platform that will deliver a best-in-class quoting experience that will revolutionize how we serve brokers and their clients. 

CYBER POWER PANEL

What’s Shaping Cyber Risk in 2027?

Speakers: Avi Mali, Mouna Hanna, Ruby Rai, Sophia Kudlyk

Moderator: Brett Boadway

This power panel will cover all angles of cyber risk and how brokers can prepare themselves and their clients for the cyber and AI risks of tomorrow. Topics covered include regulatory and privacy developments, current market state and how these factors are impacting underwriting and coverage. The panel will dig into the types of claims they are seeing across their portfolios and how client behaviour adapts after one. 

They’ll also provide practical tips on how brokers can keep up with the pace of emerging cyber risks – and how they can best position themselves to sift through the noise to best advise their clients. 

KEYNOTE

The Prevention Shift: Real-Time Threat Intelligence Powered by Humans

Speakers: Steve Penney, Marcus Fluellon

Cyber risks are fluid and change frequently during the policy period which makes real-time information and prevention a gamechanger. In this session, Steve and Marcus will go over how BOXX’s investments in technology and cyber security are helping clients stay ahead of digital and operational risks. They’ll showcase practical examples of how our threat intelligence model, made up of humans powered by tech and AI – not just alerts – prevent 80% of potential claims from turning into a breach.  

KEYNOTE

Beyond Cyber Policy Wordings: Differentiators that Matter

Speakers: Erik Tifft, Katie Pollock

Katie and Erik will cover what’s new at BOXX and how we’re championing the next phase of cyber insurance. They’ll cover our all-in-one policy and service differentiators that are included in every BOXX policy at no extra cost – and what brokers and clients find to be the most valuable. 

They’ll also cover what’s in our policy pipeline plus key endorsements within Cyberboxx® Business that will showcase the value of a cyber insurance policy to the 80% of businesses that don’t have one. 

KEYNOTE

The State of Cyber Risk in 2026

Speaker: Neal Jardine

This session will set the stage for the day and cover big-picture perspectives on the everchanging cyber risk landscape. Neal will help brokers sharpen how they discuss cyber risk topics with clients by highlighting the top attack vectors and AI trends impacting cyber risks against Canadian businesses.

Leveraging his technical background, he will dig into how interconnected systems and technology interdependencies are creating new risks for businesses they may be unaware of – and where cyber insurance can help. And lastly, he will touch upon personal cyber trends and how they will be an emerging opportunity area for brokers.