Business interruption
Ask what event triggers coverage, how long you must wait, which income and extra expenses qualify, and how the policy calculates loss. An unavailable system alone does not establish coverage.
CYBERAFFIRM / COVERAGE
Understand what a cyber policy may do
Start with the pressure on your business. Then read the terms that decide what help is available.
Ransomware and recovery
Ask about investigation, restoration and extortion-related expenses. Review provider approval, reporting conditions and exclusions. Insurance does not prevent attacks or guarantee recovery.
Social engineering
A convincing email or phone call can lead an employee to act on fraudulent instructions. Ask specifically whether the relevant fraud or funds-transfer scenario is covered. Do not assume it falls under every cyber policy.
Crisis communications
Ask about notification, communications providers and public-relations expenses. Check approvals and sublimits. These services are different from a promise to restore reputation.
Your share of the cost
Read retentions, deductibles, sublimits, waiting periods, security requirements and excluded events together. Ask what you must do before incurring response expenses.
General educational resource: FTC cyber insurance guidance, checked October 16, 2026. These review prompts do not describe a specific insurer’s product. Coverage decisions depend on the insurer and the actual policy terms.
Talk through my questions ↗