Cyber Risk
Insurance
Quick Quote
2 | Cyber Risk Insurance
Cyber Risk Insurance
Application (for UK businesses with a Turnover of less than £50M)
Broker
Name of Proposer
Company number Charity Registration number
Business Description
Registered Address
Post Code
Please detail Subsidiary Information where cover is requested under this application
Subsidiary company name Country Company number Business description
Policy wording: RSA Cyber Risk Insurance. The policy wording, Policy summary and our Cyber Risk Insurance Brochures can be found on our
website at www.rsabroker.com
Guidelines to help you complete this Application
If any of the answers provided in this Statement of Fact are “NOT TRUE” the Proposer must provide the relevant additional information and where
this is provided, this will need to be reviewed and authorised by RSA. Provided upon review the risk is acceptable to RSA, RSA will endorse the
disclosure for reference. Where the additional information provided or requested is unacceptable to the Insurer, the risk will be ineligible for Quick
Quote.
The proposer should keep a copy of this application and any other information supplied to RSA in connection with this quote.
By accepting this declaration to bind this Policy you will be confirming that the information provided is the correct and true position.
Please check your Statement of Fact, Schedule and Policy carefully to ensure you have the required cover and the information is correct.
3 | Cyber Risk Insurance
Cyber Risk Insurance - Statement of Fact
RSA is unable to provide this cover for businesses involved in the following activities:
Government entities (central and local government, regional authorities and councils)
*Global financial institutions
Majority of turnover derived from online gaming
Majority of turnover derived from the provision of crypto-currency or services associated with crypto-currency
Adult entertainment industry
Nuclear risks
*Global Financial Institution – Defined as central reserve banks and national stock exchanges
If you are in any doubt as to whether any information is something that should be disclosed to RSA please contact Your Insurance Adviser
immediately.
Please Tick – This
statement is TRUE
Please Tick – Additional
Information provided
1. Your Company is domiciled in the UK and has no assets, subsidiaries or operations
outside of the United Kingdom.
2. You have NOT been declared bankrupt or insolvent or been the subject of
bankruptcy proceedings in the previous 6 years.
3. You do NOT anticipate any dismissal or redundancy of any employees who
administrate information technology in the next 3 months.
4. You are NOT aware of any matter that is reasonably likely to give rise to any loss
or claim for cover being requested in this application?
5. You have NOT had any investigation or information request concerning any handling
of personally identifiable information.
6. In the last financial year You have had a positive net worth and You have made a
profit before tax.
7. NO Insurer ever cancelled, withdrawn or non-renewed a policy or coverage therein
that provided the same or similar coverage as the insurance requested.
8. You have NOT suffered any Cyber loss or any Cyber claim including but not limited to
a regulatory, governmental or administrative action brought against You.
9. Your Company does NOT have any assets or turnover in the USA.
10. The annual income, turnover or annual revenue of Your Company in the last
12 months is LESS than £50M.
11. The following activities are not suitable for the Cyber Risk Quick Quote.
Please complete the Cyber Risk Proposal form and submit to RSA.
Your business activities do NOT include any of the following;
*Critical National Infrastructure (CNI)
Pharmaceuticals
Telecommunications
Aerospace
Data aggregators/Analytics
Education
Financial Institutions/Financial Services/Accountants/Law Firms
Healthcare
Manufacturing where Direct Numerical Control (DNC) is used
Media (Press/TV/Radio)
Payment processors
Information Technology
TV and Broadcasting
*Critical National Infrastructure - Defined as Power Generation & Distribution, Water
Supply & treatment, Sewage treatment.
4 | Cyber Risk Insurance
Please Tick – This
statement is TRUE
Please Tick – Additional
Information provided
12. You process, transmit or store LESS than 1,000,000 financial transactions
(Credit card payments) per year.
13. You process, transmit or store LESS than 1,000,000 records containing an
individual’s personal information per year.
14. You operate commercially licenced and purchased firewalls to prevent, detect and
monitor intrusions across Your network and regularly apply patches & updates in
accordance with the suppliers’ recommendations.
15. You operate commercially licenced and purchased anti-virus software across Your
network and regularly apply patches & updates in accordance with the suppliers’
recommendations.
16. You enforce a Policy to encrypt all mobile devices, including laptops, tablets,
smartphones and memory sticks.
17. You encrypt all collected, stored, processed and transmitted personal and
confidential data.
18. If special category Personal Data is collected, stored, processed, or transmitted,
Your Company is GDPR compliant and additional protection is in place to ensure that
information is appropriately safeguarded.
19. You back up Your Critical business systems, Data and Personal Data at least weekly
to a different location.
20. The backup of Your Critical business systems, Data and Personal Data is stored in a
secure locked location with access restricted to authorised personnel only.
21. Please confirm You regularly apply patches and updates in accordance with the
suppliers’ recommendations and always apply critical system patches immediately
with less critical patches always being applied within 30 days of release.
22. You have a policy for compliance with the requirements of current (or superseding)
UK data protection legislation, e.g. the EU General Data Protection Regulation 2018
(GDPR) or the equivalent in the geographical regions in which You transact business.
Cyber Essentials is a new Government-backed and industry supported scheme to guide businesses in protecting themselves against cyber
threats. Cyber Essentials documents are FREE to download and any organisation can use the guidance to implement essential security controls.
Details can be found on the website: https://www.cyberstreetwise.com/cyberessentials/
Comprehensive Breach Response Management
Together with our partners, Crawford, a global leader in Cyber incidents and crisis management; we provide a 24/7/365 response that will:
Immediately triage the issue and advise on the best course of action;
Provide a panel of experts help, advice and assistance to deal with what a cyber incident entails.
Help return business operations to pre-incident levels.
Time is of the essence but haste can cause as many problems as it solves. Expert help and advice is the key to a speedy and effective resolution
of the problem.
It is almost impossible to organise this on an ad hoc basis – fortunately we have you covered.
This pricing table is valid until date to 30/06/2021.
Prices are GROSS of commission and exclude IPT. Please note that Sub limits may apply.
For full details of all limits and sub limits please refer to your policy.
Limit of Indemnity
Turnover £100,000 £250,000 £500,000 £1,000,000 Applicable
Excess
Applicable
Waiting Period
<£1m £352 £613 £926 £1,320 £1,000 8 hours
£1m-5m £577 £1,007 £1,416 £2,400 £1,000 8 hours
£5m-10m £840 £1,541 £2,282 £3,300 £1,000 8 hours
£10m-20m £1,232 £2,054 £2,956 £4,200 £2,500 8 hours
£20m-35m £1,826 £3,043 £4,314 £6,120 £2,500 8 hours
£35m-50m £2,282 £3,804 £5,352 £7,860 £2,500 8 hours
5 | Cyber Risk Insurance
Cyber Risk Insurance - Quotation Summary
RSA include cover for Outsourced Data where the outsourcing companies are domiciled in the EU and these have been declared. Please list the
companies to whom you outsource any part of your Computer System, Network or Data. This should include, but is not limited to, companies to
whom you outsource IT/network security, payment processing, website hosting, data storage or application service provision.
Company Name Company Number Service Provided
What firewall(s) do you use? (make and model)
What anti-virus software do you use? (make and version)
Which operating system(s) do you run? (please tick all that apply)
Windows OS Linux Other
PCI compliance level?
(delete as appropriate)
None / Level 1 / Level 2 / Level 3 / Level 4
Date of last assessment
Turnover in the last 12 months
Number of Employees?
Percentage of turnover generated on-line
Limit Required
Premium applicable
Retro Active Date 90 days prior to Period of Insurance start date
Cover Start Date
Your policy runs for 12 months from the start date shown on
your schedule.
Gross Revenue or Gross Profit
(*delete one option as appropriate)
*Gross Revenue / *Gross Profit
Cyber Essentials Certification (if known)
Other RSA Policy Number (if applicable)
6 | Cyber Risk Insurance
Important Notice Concerning Disclosure
Before your Cyber Risk Insurance takes effect you have a duty to make a fair presentation of the risks to be insured under your Cyber Risk
Insurance Policy. A fair presentation of the risk is one:
which:
discloses to Us every material circumstance which You know of or ought to know of; or
gives Us sufficient information to put Us on notice that We will need to make further enquiries for the purpose of revealing those material
circumstances,
which makes that disclosure referred to above in a manner which is reasonably clear and assessable to Us; and
in which every material representation as to a matter of fact is substantially correct, and every material representation as to a matter of
expectation or belief is made in good faith.
A material circumstance is one that would influence Our decision as to whether or not to insure You and, if so, the terms of that insurance. If You
are in any doubt as to whether a circumstance is material you should disclose it to Us. A copy of the proposal should be retained by you for your
own records.
Financial or Trade Sanctions
Please note that Royal & Sun Alliance Insurance plc is unable to provide insurance in circumstances where to do so would be in breach of any
financial sanctions imposed by the United Nations or any government, governmental or judicial body or regulatory agency. Full details will be
provided in Your policy documentation.
Data Protection
RSA will treat your personal information fairly and lawfully in accordance with the EU General Data Protection Regulation 2018 (GDPR).
7 | Cyber Risk Insurance
Declaration and Undertaking
I/We declare that every statement and particular contained within this proposal form:
which is a statement of fact, is substantially correct, and
which is matter of expectation or belief, is made in good faith.
If any such facts, expectations and/or beliefs materially change before this Cyber Risk insurance policy takes effect I/we undertake to provide
details of all such changes to Us in order to comply with my/our obligation to provide a fair presentation of the risk to be insured under the Cyber
Risk insurance policy.
For the purposes of making this proposal for insurance, I/we agree that the Intermediary (which I/we have appointed to advise in relation to this
policy) is acting on my/our behalf and not as an agent of RSA.
Signature (on behalf of the Proposer)
Print Name of the Signatory Position Held / Title
For and on behalf of (Insert name of the Proposer)
Date
Additional Information
click to sign
signature
click to edit
Royal & Sun Alliance Insurance plc (No. 93792).
Registered in England and Wales at St Mark’s Court, Chart Way, Horsham, West Sussex, RH12 1XL
Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
UKC04794J (Gross Premium table) November 2020