Incident response
Forensic, legal, IT and notification costs once a breach is detected.
Cyber Liability Insurance
0418 166 122Compare cyber liability insurance quotes from multiple Australian insurers. Insurance quotes from a licensed Australian broker with Steadfast network access.
By requesting a quote you accept our financial services guide and privacy policy. General information only.
Cyber Liability Insurance
First-party and third-party cyber cover for Australian businesses.
Most Australian cyber claims are not sophisticated. They are an invoice paid to a redirected bank account after an email mailbox was compromised, or a ransomware event that stops trading for a week. The cost is downtime, recovery, notification and the money that went out the door, none of which a professional indemnity policy is designed to carry.
What is it?
Cyber liability combines first-party cover for your own losses - incident response, forensics, data restoration, business interruption and extortion - with third-party cover for claims and regulatory action after a privacy breach. Businesses covered by the Privacy Act also have notifiable data breach obligations to the OAIC and affected individuals, and response costs are usually the first thing a policy responds to.
What does cyber liability insurance cover?
Business interruption
Lost income while systems are down, subject to the waiting period in the wording.
Funds transfer fraud
Money lost to social engineering or payment redirection, typically under a sublimit.
What affects the cost?
- Turnover and volume of records held
- Data sensitivity - health, financial, identity
- Multi-factor authentication and tested backups
- Payment authorisation controls
- Limit, sublimits and excess
Worth raising on the call
- Insurers increasingly require multi-factor authentication and tested backups before quoting.
- Social engineering losses usually sit under a much smaller sublimit than the policy limit.
- Cyber and professional indemnity overlap, and the split depends on how both wordings are drafted.
Claims we are commonly asked about
Invoice paid to a fraudster
A staff mailbox is compromised, a genuine supplier invoice is intercepted and reissued with different bank details, and the payment goes out before anyone calls to check. Recovery from the receiving bank is rare once funds move, so the loss is usually assessed under the funds transfer or social engineering sublimit rather than the full policy limit.
Ransomware stops trading for a week
Servers are encrypted overnight, quoting and invoicing stop, and the business runs on paper while systems are rebuilt from backups. The claim generally combines incident response, forensics and data restoration with business interruption once the waiting period in the wording is served.
Customer records exposed and notified
A misconfigured file share leaves customer records including identity documents accessible, triggering an assessment under the notifiable data breach scheme. Costs typically start with legal advice, forensic scoping, notification and a response line, well before any third party brings a claim.
Worth confirming in the wording
- Worth confirming what security controls the policy assumes are in place, since multi-factor authentication, tested backups and patching are often conditions rather than recommendations.
- Worth confirming the sublimit and any callback verification requirement on funds transfer and social engineering fraud, because it is commonly far lower than the headline limit.
- Worth confirming how business interruption is triggered and measured, including the waiting period and whether outages at your IT provider or cloud platform are contemplated.
Common questions
Does my professional indemnity policy already cover a cyber incident?
Usually only partly. Professional indemnity responds to claims made against you for your professional services and typically does not carry your own recovery costs, downtime or the money lost in a fraudulent payment. Some wordings include a small privacy extension, so it is worth comparing what each policy actually responds to rather than assuming there is overlap.
Do small businesses really need cyber insurance?
Small businesses are heavily represented in Australian incident reporting, largely because email compromise and ransomware are indiscriminate rather than targeted. The practical question is what a week without systems, or a payment that leaves the account, would do to cash flow. That answer varies by business, which is why the cover and limits are usually sized against downtime and payment volumes.
Will an insurer pay a ransom demand?
Some wordings include extortion cover and others limit or exclude it, and any payment also has to sit within Australian sanctions and reporting law. Insurers generally require their incident response panel to be engaged before anything is paid or even negotiated. Treat it as a clause to read closely rather than something to assume.
What does cyber liability cost?
It depends on the exposure rather than a fixed rate. The usual drivers are turnover, the volume and sensitivity of records held, whether you handle health, financial or identity data, your security controls, payment authorisation processes, and the limit, sublimits and excess selected. Businesses with multi-factor authentication and tested backups are typically rated more favourably.
General information only. Cover, limits and exclusions depend on the PDS, TMD, eligibility, underwriting and the policy terms. See professional indemnity insurance for the wider picture.
10 Years Advising Steadfast Network Access Licensed Australian Brokers Australia-Wide
Quotes That Are Fast And Easy
Get a quote fast. Compare quotes from multiple insurers. Get the best deal for your cyber liability insurance.
How Do You Get Started?
We make cyber liability insurance fast and easy at Insurance Time. Get a quote today.
-
Start a quote.
Fill the quote form above, or call us on 0418 166 122.
-
Quotes gathered.
Our team will approach insurers and gather your options.
-
You're covered.
Choose your option and receive your policy documents.
Why Choose Insurance Time
Protect yourself with cover arranged by a licensed Australian broker who explains it in plain English.
Professional
Our team are experienced in cyber liability insurance and licensed to advise on it.
Experienced
Ten years advising Australian families and businesses, with Steadfast network access.
Renewal management
Our team will manage your renewals and keep you informed and up to date.
24/7 claims
Notify us of a claim 24/7, 365 days a year.
Cover Options
We can arrange different levels of cover for you and your business.
Motor vehicles and fleets
Third party to comprehensive motor and fleet cover.
Public liability
Protection for third party property damage or personal injury.
Business package
Customised cover for your business assets and liabilities.
Personal insurance
Protection for you and your family.
Property
Protection for your personal and business premises and contents.
Workers compensation
Cover questions for your employees and workers.
Get A Quote. It's Complimentary.
It's time to review your cyber liability insurance.
General information only. Any cover depends on the PDS, TMD, eligibility, underwriting, and policy terms. We use your details to respond to this enquiry.