What does a deductible mean in cyber insurance?
The deductible is the contractually defined share of a covered loss that the insured company bears itself. How it is applied is set out in the policy. A single figure is not enough for a comparison.
In particular, you need to clarify:
- does the deductible apply per loss event, per claim or per coverage module?
- are related incidents treated as a single event?
- does a different deductible apply to individual benefits?
- are external immediate-response costs paid before or after the deductible is applied?
- does a time-based waiting period also apply?
Deductible, waiting period and sublimit are different things
| Term | Function |
|---|---|
| Deductible | the financial share the company bears itself in a covered event |
| Waiting period | the length of a business interruption that, under the contract, triggers no benefit or only a limited one |
| Sublimit | the maximum benefit within a specific coverage module |
| Sum insured | the overall contractual limit, subject to all partial limits and conditions |
A low deductible may be of little help if a relevant benefit is only insured with a tight sublimit. Conversely, a higher retention may be manageable if critical immediate assistance and large, infrequent costs are adequately covered.
How does a company choose a sensible retention?
There is no universally optimal amount. The choice should fit your liquidity and incident plan:
- Available liquidity: what amount can be absorbed at short notice without putting operations at risk?
- Frequent smaller costs: which expenses does the company deliberately want to fund itself?
- Critical immediate assistance: could the deductible delay engaging forensic specialists or legal counsel?
- Outage profile: how quickly do significant losses arise during a standstill, and when does the waiting period end?
- Overall terms: what change in premium does the specific quotation show for a different retention?
Only the insurer can state with binding effect how a particular deductible affects the individual premium.
An example without an invented loss forecast
For your internal comparison, use your own documented scenario: for example, the failure of a critical system for the maximum realistic recovery time. Enter only your own figures for external assistance, additional work, lost contribution margin and recovery. Then apply each quotation’s actual waiting period, deductible and relevant sublimit.
This way you compare contract mechanics. The result is neither a loss forecast nor a promise of benefits.
Questions for comparing quotations
- Which costs actually count as an insured loss?
- When does the waiting period start and end?
- Is the deductible applied once or across several modules?
- How does the policy treat a series of related events?
- Which sublimits apply to cyber fraud, extortion, data protection, service providers and recovery?
- Are VAT, internal staff costs and precautionary measures taken into account?
- Do external service providers require prior approval?
Compare these answers in writing and on the same coverage basis. Simply setting premium against deductible can hide material differences.
Source and note
The specific interpretation depends on the quotation, the general and special terms and conditions of insurance, and the circumstances of the loss.