{"id":8555,"date":"2025-10-15T12:13:17","date_gmt":"2025-10-15T05:13:17","guid":{"rendered":"https:\/\/ligaasuransi.com\/?p=8555"},"modified":"2025-10-15T12:13:17","modified_gmt":"2025-10-15T05:13:17","slug":"informasi-dan-dokumen-yang-diperlukan-untuk-penerbitan-polis-cyber-insurance","status":"publish","type":"post","link":"http:\/\/ligaasuransi.com\/en\/informasi-dan-dokumen-yang-diperlukan-untuk-penerbitan-polis-cyber-insurance\/","title":{"rendered":"Information and Documents Required for Issuing a Cyber \u200b\u200bInsurance Policy"},"content":{"rendered":"

<\/p>\n

Cyberattacks Are Rising Dramatically, But Many Companies Are Still Unprepared<\/span><\/h3>\n

In the last 5 years, the number of cyber attacks against companies in Indonesia has increased sharply.<\/span><\/p>\n

From hacking of government websites, ransomware that paralyzes public services, to customer data leaks from various sectors \u2014 all show that digital threats are now a real risk, not just a potential one.<\/span><\/p>\n

Unfortunately, most companies still don’t understand that cyber insurance is not just about compensation, but also about business resilience.<\/span><\/p>\n

However, before an insurance policy is issued, the company must go through an important stage that is often overlooked, namely the underwriting and information gathering process.<\/span><\/p>\n

This is where PT. Liberty and General Insurance Broker (L&G Insurance Broker) plays a crucial role\u2014helping clients prepare the correct data and documents so that the policy issuance process runs smoothly, quickly, and provides optimal protection.<\/span><\/p>\n

 <\/p>\n

Why the Cyber \u200b\u200bInsurance Underwriting Process is So Important<\/span><\/h3>\n

Unlike conventional insurance such as fire or vehicle insurance, the risks in cyber insurance are very dynamic and complex.<\/span><\/p>\n

Insurance companies not only value physical assets, but also:<\/span><\/p>\n

    \n
  1. Digital infrastructure,<\/span><\/li>\n
  2. Data security process,<\/span><\/li>\n
  3. Legal compliance,<\/span><\/li>\n
  4. And preparedness to face incidents.<\/span><\/li>\n<\/ol>\n

    This process is called underwriting assessment \u2014 the risk assessment stage to determine whether a company qualifies for insurance, as well as what the appropriate premium and coverage limits are.<\/span><\/p>\n

    Without accurate information, companies could:<\/span><\/p>\n

      \n
    1. Charged too high premiums,<\/span><\/li>\n
    2. Get a policy with limited coverage,<\/span><\/li>\n
    3. Or even rejected by the insurer because it is considered too risky.<\/span><\/li>\n<\/ol>\n

       <\/p>\n

      The Strategic Role of Brokers in the Underwriting Stage<\/span><\/h3>\n

      Brokers like L&G Insurance Broker act as professional bridges between clients and insurance companies.<\/span><\/p>\n

      At the underwriting level, L&G helps:<\/span><\/p>\n

        \n
      1. Identifying clients’ digital risk needs and exposures.<\/span><\/li>\n
      2. Prepare information and supporting documents systematically.<\/span><\/li>\n
      3. Explain to the underwriter the nature of the client’s business and the risk mitigation measures that have been implemented.<\/span><\/li>\n
      4. Negotiate the best terms and premiums based on risk profile.<\/span><\/li>\n
      5. Ensure data confidentiality during the assessment process.<\/span><\/li>\n<\/ol>\n

        With broker assistance, the company not only looks \u201cready,\u201d but also gains more trust from insurers due to its complete and professional documentation.<\/span><\/p>\n

         <\/p>\n

        Types of Information Required by Underwriters<\/span><\/h3>\n

        Each insurance company has a slightly different format, but in general, there are five major groups of information that must be prepared before a cyber policy is issued.<\/span><\/p>\n

          \n
        1. General Company Information<\/b><\/li>\n<\/ol>\n

          This basic information is used to understand the business context and scale of the company’s operations.<\/span><\/p>\n\n\n\n\n\n\n\n\n
          Requested Data<\/b><\/td>\nInformation<\/b><\/td>\n<\/tr>\n
          Name, address and field of business<\/span><\/td>\nIncluding main office and branch locations.<\/span><\/td>\n<\/tr>\n
          Number of employees<\/span><\/td>\nTotal and number of IT system users.<\/span><\/td>\n<\/tr>\n
          Country or region of operation<\/span><\/td>\nIs the business only in Indonesia or international.<\/span><\/td>\n<\/tr>\n
          Annual turnover and net profit<\/span><\/td>\nTo determine financial exposure.<\/span><\/td>\n<\/tr>\n
          Use of customer data<\/span><\/td>\nWhether managing personal data (B2C) or internal data (B2B).<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

           <\/p>\n

          \ud83d\udccc<\/span>L&G Note: Companies that manage large amounts of personal data such as e-commerce, fintech, hospitals, or universities require higher coverage limits.<\/span><\/p>\n

            \n
          1. IT Infrastructure and Security Systems<\/b><\/li>\n<\/ol>\n

            This section is the core of the cyber risk assessment.<\/span><\/p>\n

            Underwriters want to know how strong a company’s digital defenses are.<\/span><\/p>\n\n\n\n\n\n\n\n\n\n
            Aspect<\/b><\/td>\nSample Questions<\/b><\/td>\n<\/tr>\n
            \n
              \n
            1. System Access<\/span><\/li>\n<\/ol>\n<\/td>\n
            		Is the system protected with multi-factor authentication (MFA)?<\/span><\/td>\n<\/tr>\n
            \n
              \n
            1. Firewall and Antivirus<\/span><\/li>\n<\/ol>\n<\/td>\n
            		The type of software used, as well as the last update.<\/span><\/td>\n<\/tr>\n
            \n
              \n
            1. Backup and Disaster Recovery<\/span><\/li>\n<\/ol>\n<\/td>\n
            		Is data backed up regularly and tested for recovery?<\/span><\/td>\n<\/tr>\n
            \n
              \n
            1. Enkripsi Data<\/span><\/li>\n<\/ol>\n<\/td>\n
            		Is sensitive data encrypted during transmission and storage?<\/span><\/td>\n<\/tr>\n
            \n
              \n
            1. Third Party Vendor Management<\/span><\/li>\n<\/ol>\n<\/td>\n
            		Do vendors have the same security standards?<\/span><\/td>\n<\/tr>\n
            \n
              \n
            1. Security Audit<\/span><\/li>\n<\/ol>\n<\/td>\n
            		When was the last time an audit or penetration test was performed?<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

             <\/p>\n

            \ud83d\udccc<\/span>L&G Note: If your company does not yet have a formal security policy, L&G can assist in drafting a summary IT Risk Statement to ensure compliance with underwriting requirements.<\/span><\/p>\n

              \n
            1. History of Cyber \u200b\u200bIncidents and Preventive Actions<\/b><\/li>\n<\/ol>\n

              Underwriters will assess how the company learns from past experiences.<\/span><\/p>\n\n\n\n\n\n\n
              Requested Data<\/b><\/td>\nExplanation<\/b><\/td>\n<\/tr>\n
              Incident history<\/span><\/td>\nHave there ever been data leaks, malware, or phishing?<\/span><\/td>\n<\/tr>\n
              Loss value<\/span><\/td>\nHow much financial loss resulted from the incident.<\/span><\/td>\n<\/tr>\n
              Corrective steps<\/span><\/td>\nWhat actions have been taken post-incident.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

               <\/p>\n

              \ud83d\udccc<\/span>L&G Note: If there was a previous incident, L&G assisted the client in preparing a remediation report to demonstrate security improvements.<\/span><\/p>\n

                \n
              1. Compliance and Regulation<\/b><\/li>\n<\/ol>\n

                Regulatory compliance has become an important indicator for underwriters, especially since the enactment of Law No. 27 of 2022 concerning Personal Data Protection (PDP Law).<\/span><\/p>\n

                Aspect<\/span> Question<\/span><\/p>\n\n\n\n\n\n\n
                Privacy Policy<\/b><\/td>\nDoes the company have a personal data protection policy (Privacy Policy)?<\/b><\/td>\n<\/tr>\n
                Appointment of Data Protection Officer (DPO)<\/span><\/td>\nWho is responsible for data security in the company?<\/span><\/td>\n<\/tr>\n
                ISO\/IEC 27001 Compliance<\/span><\/td>\nDoes the security system follow international standards?<\/span><\/td>\n<\/tr>\n
                Report to regulator<\/span><\/td>\nAre companies required to report data breaches?<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                 <\/p>\n

                \ud83d\udccc<\/span>L&G Note: Good compliance can lower premiums as it is considered an effective risk mitigation.<\/span><\/p>\n

                  \n
                1. Insurance Requirements (Insurance Specification)<\/b><\/li>\n<\/ol>\n

                  The latest information relates to financial needs and desired policy limits.<\/span><\/p>\n\n\n\n\n\n\n\n\n
                  Component<\/b><\/td>\nExplanation<\/b><\/td>\n<\/tr>\n
                  Coverage Limit (Sum Insured)<\/span><\/td>\nThe maximum total claims expected to be covered.<\/span><\/td>\n<\/tr>\n
                  Deductible \/ Retention<\/span><\/td>\nThe risk value that will be borne by the company itself.<\/span><\/td>\n<\/tr>\n
                  Coverage Type<\/span><\/td>\nIs it just first-party cover or does it include third-party liability?<\/span><\/td>\n<\/tr>\n
                  Coverage Countries<\/span><\/td>\nDesired jurisdiction area (e.g. Asia, global, etc.).<\/span><\/td>\n<\/tr>\n
                  Optional Extensions<\/span><\/td>\nAdditional guarantees such as Social Engineering, Business Interruption, etc.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \ud83d\udccc<\/span>L&G Note: L&G will help adjust limits to realistic risks to keep premiums efficient.<\/span><\/p>\n

                   <\/p>\n

                  Supporting Documents That Must Be Prepared<\/b><\/p>\n

                  In addition to the above data, several formal documents are often requested by insurance companies, especially for medium and large corporate clients.<\/span><\/p>\n\n\n\n\n\n\n\n\n\n
                  Document Type<\/b><\/td>\nInformation<\/b><\/td>\n<\/tr>\n
                  \ud83d\udcd8<\/span>Company Profile<\/span><\/td>\nSummary of the company’s business and main activities.<\/span><\/td>\n<\/tr>\n
                  \ud83d\udda5\ufe0f<\/span>IT Network Structure (Network Diagram)<\/span><\/td>\nTo understand system infrastructure and critical points.<\/span><\/td>\n<\/tr>\n
                  \ud83e\udde9<\/span>Information Security Policy<\/span><\/td>\nOfficial internal policy document regarding data security.<\/span><\/td>\n<\/tr>\n
                  \ud83d\udcc4<\/span> Laporan Audit IT \/ Penetration Test Report<\/span><\/td>\nEvidence that the system is tested regularly.<\/span><\/td>\n<\/tr>\n
                  \ud83e\uddfe<\/span>Latest Financial Report<\/span><\/td>\nDemonstrates the company’s financial capabilities.<\/span><\/td>\n<\/tr>\n
                  \ud83e\udde0<\/span> Business Continuity Plan (BCP)<\/span><\/td>\nStrategies for dealing with operational disruptions and recovery.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \ud83d\udccc<\/span>L&G Note: If some documents are not available, the broker can help prepare a condensed version or executive summary to avoid delaying the underwriting process.<\/span><\/p>\n

                   <\/p>\n

                  Cyber \u200b\u200bInsurance Application Process with L&G Insurance Broker Assistance<\/span><\/h3>\n

                  The following are the general steps implemented by PT. Liberty and General Insurance Broker:<\/span><\/p>\n\n\n\n\n\n\n\n\n\n
                  Level<\/b><\/td>\nDescription<\/b><\/td>\n<\/tr>\n
                  1. Kick-off Meeting<\/span><\/td>\nInitial discussions with clients to understand business models and digital risks.<\/span><\/td>\n<\/tr>\n
                  2. Risk Profiling & Data Collection<\/span><\/td>\nL&G assists in completing the insurer’s Cyber \u200b\u200bRisk Questionnaire.<\/span><\/td>\n<\/tr>\n
                  3. Gap Analysis<\/span><\/td>\nIdentifying areas of weakness in IT security.<\/span><\/td>\n<\/tr>\n
                  4. Market Placement<\/span><\/td>\nL&G submitted proposals to several insurers (market comparison).<\/span><\/td>\n<\/tr>\n
                  5. Negotiation & Binding<\/span><\/td>\nNegotiate the best limits, deductibles, premiums, and policy wording.<\/span><\/td>\n<\/tr>\n
                  6. Policy Delivery<\/span><\/td>\nThe policy is issued and delivered to the client, complete with claims guidelines.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  With a professional approach and neat documentation, L&G ensures clients get the best deals from the insurance market, both local and international.<\/span><\/p>\n

                   <\/p>\n

                  Challenges Companies Often Face<\/span><\/h3>\n

                  Based on L&G’s experience, there are several common mistakes that often cause cyber policy applications to be delayed or rejected:<\/span><\/p>\n

                  \u274c<\/span>Incomplete or inconsistent data between answers in the questionnaire and IT reports.<\/span><\/p>\n

                  \u274c<\/span>Lack of evidence of security systems such as firewalls, MFA, or activity logs.<\/span><\/p>\n

                  \u274c<\/span>There is no documented disaster recovery plan.<\/span><\/p>\n

                  \u274c<\/span>Underestimation of the risk value, for example, only requesting a small limit even though there are millions of customer data.<\/span><\/p>\n

                  \u274c<\/span>Not using a broker, so communication with the insurer is inefficient.<\/span><\/p>\n

                   <\/p>\n

                  \ud83d\udccc<\/span>Solution: With L&G assistance, all of the above can be anticipated through a pre-assessment meeting before the documents are submitted to the insurer.<\/span><\/p>\n

                   <\/p>\n

                  Case Study: Successful Application Due to Complete Documentation<\/span><\/h3>\n

                  \ud83c\udfe2<\/b>Case 1 \u2013 National Fintech Company<\/b><\/p>\n

                  L&G helps fintech companies prepare complete underwriting documents, including penetration test reports.And incident response plan.<\/span><\/p>\n

                  As a result, premiums can be reduced by 20% compared to other insurers’ initial offers.<\/span><\/p>\n

                  \ud83c\udfed<\/b>Case 2 \u2013 Multinational Automotive Manufacturer<\/b><\/p>\n

                  Initially, it was rejected because the system didn’t have MFA. After L&G helped develop a policy improvement plan, the insurer approved the policy with a three-month implementation timeline.<\/span><\/p>\n

                  \ud83c\udfe5<\/b>Case 3 \u2013 Private Hospital<\/b><\/p>\n

                  Because it stored patient data, the underwriter requested data encryption proof. L&G helped the client create database encryption documentation. The policy was ultimately approved with a limit of IDR 50 billion.<\/span><\/p>\n

                   <\/p>\n

                  Tips from L&G Insurance Broker: Prepare Now<\/span><\/h3>\n

                  \u2705<\/span>Conduct an IT security audit at least once a year.<\/span><\/p>\n

                  \u2705<\/span>Establish documented data security policies.<\/span><\/p>\n

                  \u2705<\/span>Use multi-factor authentication across critical systems.<\/span><\/p>\n

                  \u2705<\/span>Backup data regularly and test recovery.<\/span><\/p>\n

                  \u2705<\/span>Involve the broker from the start so that documents are prepared according to the insurer’s needs.<\/span><\/p>\n

                   <\/p>\n

                  Conclusion: Good Documentation = More Efficient Premiums<\/span><\/h3>\n

                  The better your digital security documentation and preparedness, the lower your risk in the eyes of underwriters \u2014 and the more competitive your premiums will automatically be.<\/span><\/p>\n

                  Cyber \u200b\u200bInsurance is not just a financial product, but part of a company’s digital risk management strategy.<\/span><\/p>\n

                  With the assistance of PT. Liberty and General Insurance Broker (L&G Insurance Broker), every company can navigate the underwriting process easily, quickly, and professionally\u2014without wasting time due to technical or administrative errors.<\/span><\/p>\n

                  Want to know what documents you need to prepare to get your Cyber \u200b\u200bInsurance application approved quickly and efficiently?<\/span><\/p>\n

                  Consult directly with PT. Liberty and General Insurance Broker (L&G Insurance Broker) \u2014 a trusted independent broker for your business’s digital risk protection.<\/span><\/p>\n

                  \n

                  HOTLINE L&G 24 JAM:<\/b> 0811-8507-773<\/b><\/a> (PHONE \u2013 WHATSAPP \u2013 SMS)<\/b><\/p>\n

                  Website: lngrisk.co.id<\/span><\/p>\n

                  Email: halo@lngrisk.co.id<\/span><\/p>\n

                  \n

                   <\/p>","protected":false},"excerpt":{"rendered":"

                  Cyberattacks Are Rising Dramatically, But Many Companies Are Still Unprepared In the last 5 years, the number of cyber attacks against companies in Indonesia has increased sharply. From hacking of government websites, ransomware that paralyzes public services, to customer data leaks from various sectors \u2014 all show that digital threats are now a real risk, […]<\/p>\n","protected":false},"author":3,"featured_media":8556,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[129,357],"class_list":{"0":"post-8555","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-asuransi-cyber","8":"tag-asuransi-cyber","9":"tag-cyber-insurance"},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/posts\/8555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/comments?post=8555"}],"version-history":[{"count":1,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/posts\/8555\/revisions"}],"predecessor-version":[{"id":8557,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/posts\/8555\/revisions\/8557"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/media\/8556"}],"wp:attachment":[{"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/media?parent=8555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/categories?post=8555"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/ligaasuransi.com\/en\/wp-json\/wp\/v2\/tags?post=8555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}