What is Cyber \u200b\u200bInsurance and Why is it Necessary<\/span><\/h3>\nCyber \u200b\u200binsurance is a type of protection that covers financial losses resulting from attacks or disruptions to a company’s digital systems, data, or computer networks.<\/span><\/p>\nThe main objectives of this insurance are:<\/span><\/p>\n\n- Protect asset digital,<\/span><\/li>\n
- Cover the cost of recovery,<\/span><\/li>\n
- Provide compensation for lost income,<\/span><\/li>\n
- And manage legal and reputational impacts.<\/span><\/li>\n<\/ol>\n
In the Indonesian context, this need has become increasingly relevant since the enactment of the Personal Data Protection Law (PDP Law) in 2022, which requires every data manager to maintain security and be accountable for any leaks of personal information.<\/span><\/p>\n <\/p>\n
Types of Protection (Coverage) in Cyber \u200b\u200bInsurance Policy<\/span><\/h3>\nCyber \u200b\u200binsurance coverage can be divided into two large groups: first-party cover (losses experienced by the company itself) and third-party cover (legal liability towards other parties).<\/span><\/p>\nHere is the complete explanation:<\/b><\/p>\n\n- First-Party Cover (Direct Loss)<\/b><\/li>\n<\/ol>\n
\n- Data Breach Response<\/b><\/li>\n<\/ul>\n
Cover the costs arising from a breach of customer or employee personal data, including:<\/span><\/p>\n\n- Notification to data owners,<\/span><\/li>\n
- Legal consultation fees,<\/span><\/li>\n
- Credit monitoring services,<\/span><\/li>\n
- Public relations (PR) costs to control a reputation crisis.<\/span><\/li>\n<\/ul>\n
\ud83d\udccc<\/span>Example: An e-commerce company in Jakarta experienced a data breach involving 200,000 customers. Notification and media management costs reached Rp 1.2 billion\u2014all covered by a cyber insurance policy.<\/span><\/p>\n\n- Cyber Extortion \/ Ransomware<\/b><\/li>\n<\/ul>\n
Cover the costs of system recovery, negotiations, and even ransom payments to hackers (within applicable legal limits).<\/span><\/p>\nIt usually also includes the cost of a forensic IT consultant.<\/span><\/p>\n\ud83d\udccc<\/span>Example: A ransomware attack on Bank Syariah Indonesia (2023) caused national disruption. With cyber policy, the company could obtain emergency funding to restore its systems and negotiate with the hackers.<\/span><\/p>\n\n- Business Interruption<\/b><\/li>\n<\/ul>\n
Provides compensation for lost income or additional costs arising from computer system disruptions.<\/span><\/p>\n\ud83d\udccc<\/span>Example: A factory’s ERP system is down for 5 days due to malware. The policy covers lost revenue and the cost of renting a backup server.<\/span><\/p>\n\n- Data Restoration<\/b><\/li>\n<\/ul>\n
Covers the costs of recovering, restoring, or replacing digital data lost or damaged due to an attack.<\/span><\/p>\n\n- Reputation Management<\/b><\/li>\n<\/ul>\n
Covers the costs of PR consultants, media campaigns, and crisis communications to restore the company’s image after a cyber incident.<\/span><\/p>\n <\/p>\n
\n- Third-Party Cover (Legal Liability)<\/b><\/li>\n<\/ol>\n
\n- Network Security Liability<\/b><\/li>\n<\/ul>\n
Bear legal responsibility if the company system is used as a source of attack that harms other parties.<\/span><\/p>\n\ud83d\udccc<\/span>Example: Your company’s server is hacked and used to launch a DDoS attack on another company \u2014 you could be sued, and your legal defense costs would be covered by the policy.<\/span><\/p>\n\n- Privacy Liability<\/b><\/li>\n<\/ul>\n
Cover legal costs and compensation due to negligence in protecting the personal data of third parties (customers, clients, or employees).<\/span><\/p>\n\n- Regulatory Fines and Penalties<\/b><\/li>\n<\/ul>\n
Bear fines or sanctions from regulators for violations of personal data policies, as long as they do not conflict with applicable laws.<\/span><\/p>\n\n- Media Liability<\/b><\/li>\n<\/ul>\n
Cover legal risks related to digital content such as publication errors, defamation, or copyright infringement on the company’s website\/social media.<\/span><\/p>\n <\/p>\n
Optional Endorsements<\/span><\/h3>\nBrokers like L&G Insurance Broker often help companies add additional coverage to better suit industry-specific needs, including:<\/span><\/p>\n\n\n\n| Additional Coverage<\/b><\/td>\n | Description<\/b><\/td>\n<\/tr>\n\n| Social Engineering Fraud<\/span><\/td>\n | Covering losses due to social manipulation such as fake emails (phishing) that cause staff to transfer funds to fraudsters’ accounts.<\/span><\/td>\n<\/tr>\n\n| Cryptojacking<\/span><\/td>\n | Protection against misuse of company servers to mine cryptocurrency without permission.<\/span><\/td>\n<\/tr>\n\n| Reputational Harm Loss<\/span><\/td>\n | Compensation for decreased income due to negative media coverage following the attack.<\/span><\/td>\n<\/tr>\n\n| System Failure (Non-Malicious)<\/span><\/td>\n | Covers losses due to internal system disruptions, not due to hacker attacks.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n What is Excluded (Exclusions)<\/span><\/h3>\nIt is equally important to understand what the police do not cover.<\/span><\/p>\nBrokers like L&G ensure clients understand all exclusions before purchasing a policy, to avoid any surprises when it comes to claims.<\/span><\/p>\nHere are some common exclusions in cyber insurance:<\/span><\/p>\n\n\n\n| Category<\/b><\/td>\n | Exceptions<\/b><\/td>\n<\/tr>\n\n| Intentional Acts<\/span><\/td>\n | Attacks or leaks carried out intentionally by company employees or management.<\/span><\/td>\n<\/tr>\n\n| War and Terrorism<\/span><\/td>\n | Cyber \u200b\u200battacks are categorized as acts of cyber war or national-scale terrorism.<\/span><\/td>\n<\/tr>\n\n| Public Infrastructure Failure<\/span><\/td>\n | Disruptions due to power outages, internet outages, or third-party network failures.<\/span><\/td>\n<\/tr>\n\n| Physical Loss<\/span><\/td>\n | Hardware damage is not included, unless specifically guaranteed.<\/span><\/td>\n<\/tr>\n\n| Criminal Fines \/ Illegal Actions<\/span><\/td>\n | Criminal penalties or sanctions for violations of the law are not guaranteed.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n Extreme Carelessness Complete failure to implement basic security systems, such as not using passwords or firewalls.<\/span><\/p>\n <\/p>\n Why Is Cyber \u200b\u200bPolicy Wording So Complex?<\/span><\/h3>\nUnlike fire or vehicle insurance, cyber insurance policies do not have global standards.<\/span><\/p>\nEach insurance company has different definitions, clauses and limitations.<\/span><\/p>\nTherefore, the role of brokers like L&G is very important to:<\/span><\/p>\n\n- Examining the policy wording in detail,<\/span><\/li>\n
- Explaining the meaning of each technical term,<\/span><\/li>\n
- Comparing policies between insurers,<\/span><\/li>\n
- Negotiating a waiver of exclusion.<\/span><\/li>\n<\/ol>\n
A single misinterpretation of a term can lead to a claim being denied. For example, the difference between “cyber extortion” and “cyber terrorism” can determine whether or not a claim is covered.<\/span><\/p>\n <\/p>\n Real Case Example: Scope Differences Make a Big Difference<\/span><\/h3>\nCase 1: Phishing Attack Without Social Engineering Coverage<\/b><\/p>\n A financial company lost Rp 8 billion because its staff transferred money to a hacker’s account after receiving a fake email from the “Director”.<\/span><\/p>\nTheir cyber policy did not cover social engineering fraud, so the claim was rejected.<\/span><\/p>\nAfter consulting with L&G Insurance Broker, their new policy was added with a Social Engineering Coverage clause.<\/span><\/p>\nCase 2: Data Leak at a Health Clinic<\/b><\/p>\n Patient data was leaked due to a Trojan horse. L&G assisted the client in preparing notification documents, reporting to regulators, and processing a claim for PR costs totaling Rp 2 billion.<\/span><\/p>\nThe claim was approved within 30 days as all documentation was in accordance with the policy provisions.<\/span><\/p>\nCase 3: ERP System Downtime<\/b><\/p>\n A factory stopped operating for 4 days because the server was attacked by ransomware.<\/span><\/p>\nL&G Brokers assist in activating the Business Interruption clause with evidence of IT audits and financial reports.<\/span><\/p>\nThe claim of Rp 9.7 billion was paid in full by the insurer.<\/span><\/p>\n <\/p>\n The Role of L&G Insurance Brokers in Determining Appropriate Coverage<\/span><\/h3>\nDetermining the extent of cyber insurance coverage cannot be done carelessly.<\/span><\/p>\nEvery business has a different risk profile \u2014 and this is where L&G Insurance Broker’s expertise comes into play.<\/span><\/p>\nCommon steps taken by L&G include:<\/span><\/p>\n\n- Risk Profiling \u2013 mapping digital exposure and potential financial impact.<\/span><\/li>\n
- Coverage Design \u2013 tailoring coverage to the client’s specific risks.<\/span><\/li>\n
- Policy Review \u2013 comparing wording between insurers and assessing policy limits.<\/span><\/li>\n
- Premium Negotiation \u2013 reducing costs without reducing benefits.<\/span><\/li>\n
- Claim Assistance \u2013 ensures claim payments are in accordance with the actual loss value.<\/span><\/li>\n<\/ol>\n
With experience across sectors such as mining, energy, logistics and technology, L&G is able to tailor policy coverage to the needs of local and international businesses.<\/span><\/p>\n <\/p>\n Broker Tips: Things to Consider Before Buying Cyber \u200b\u200bInsurance<\/span><\/h3>\n\u2705<\/span>Make sure the policy wording is read and explained by the broker.<\/span><\/p>\n\u2705<\/span>Choose a coverage limit that is commensurate with the digital risk value.<\/span><\/p>\n\u2705<\/span>Don’t forget to add optional covers such as social engineering and reputation harm.<\/span><\/p>\n\u2705<\/span>Set up minimum security protocols (MFA, backup, firewall) to meet underwriting requirements.<\/span><\/p>\n\u2705<\/span>Use an experienced broker like L&G to ensure the claims process runs smoothly.<\/span><\/p>\n <\/p>\n Conclusion: Coverage Area = Key to Effective Protection<\/span><\/h3>\nHaving cyber insurance is not just a formality \u2014 it is a strategic investment to ensure business continuity.<\/span><\/p>\nHowever, an inappropriate policy can render protection useless.<\/span><\/p>\nWith the assistance of PT. Liberty and General Insurance Broker (L&G Insurance Broker), companies not only receive a comprehensive policy but also a thorough understanding of what is covered and excluded.<\/span><\/p>\nL&G helps ensure that every penny of premium paid provides real protection when a cyberattack actually occurs.<\/span><\/p>\n <\/p>\n \ud83d\udcbb<\/span>Want to know if your cyber policy covers all of your company’s digital risks?<\/span><\/p>\n | | | | | | | | | | |