CFC Enhances Cyber Coverage for Financial Institutions
CFC has revamped its financial institutions insurance suite by consolidating various coverages into a single policy. This update aims to address the historical challenges faced by financial institutions that previously had to acquire separate policies for Directors and Officers (D&O), Errors and Omissions (E&O), crime, and cyber risks.
Issues with Traditional Insurance Structures
Traditionally, financial institutions struggled with policies that did not fully coordinate, often leading to challenges in claims, especially with cyber-related losses. Cyber exclusions in D&O and E&O policies were meant to push claims toward dedicated cyber policies but often resulted in denied claims, leaving institutions exposed to unexpected losses.
A clear example of this issue is social engineering fraud losses, where the classification of the loss determines which policy responds—leading to disputes over which coverage provides protection.
The New Blended Structure
CFC’s new approach integrates these various lines into one policy rather than relying on brokers to manage coordination. This structure is designed to reduce protection gaps by allowing clients to select standalone coverages or a blended option. It also meets specific regulatory requirements, such as those in the Alternative Investment Fund Managers Directive (AIFMD).
However, the effectiveness of this consolidation relies heavily on how the internal boundaries of the policy are defined, as disputes may still occur if the language mirrors that of separate policies.
AI Coverage Enhancements
CFC has also incorporated affirmative coverage for AI-related risks in their comprehensive Cyber Proactive Response (CPR) policy, which includes multiple enhancements and features such as unlimited reinstatements and a nil deductible. This decision reflects a broader industry trend, highlighted by similar moves from companies like Beazley, which recently introduced AI-specific endorsements in their cyber products.
While this shift addresses the issue of silent AI risks, it remains ambiguous whether the use of AI by financial institutions is fully covered under the new policy. The distinction between cyber risks and professional liability exposures is crucial to understand for institutions seeking comprehensive coverage.
Conclusion
CFC’s updated financial institutions insurance suite represents a significant development in addressing longstanding coverage gaps. However, the intricacies of policy wording and the delineation of coverage areas will be critical in ensuring that financial institutions are adequately protected in an increasingly digital landscape.
