Introduction to Cyber Risk and Non-Admitted Markets
The insurance industry is constantly evolving to meet new and emerging threats, and perhaps no risk has grown as rapidly or unpredictably as cyber liability. Cyber insurance covers a broad range of exposures, including data breaches, ransomware attacks, business interruption, and network security liability. Because the nature of these threats changes almost daily, the traditional admitted market often struggles to keep pace with the necessary coverage adjustments and pricing models.
This is where the surplus lines market becomes essential. As detailed in our complete Surplus Lines exam guide, the surplus lines market serves as a safety valve for the insurance industry, providing a home for risks that are too new, too large, or too complex for standard carriers. Cyber insurance has become a cornerstone of the modern surplus lines industry due to its inherent volatility and the need for specialized underwriting expertise.
Admitted vs. Surplus Lines Cyber Coverage
| Feature | Admitted Market | Surplus Lines Market |
|---|---|---|
| Form Flexibility | Highly regulated; standardized forms | Freedom of form; customized language |
| Rate Approval | Requires prior state approval | Freedom of rate; market-driven |
| Risk Appetite | Preferred, stable risks | High-hazard or emerging risks |
| Speed to Market | Slow; delayed by regulation | Rapid; can adapt to new threats quickly |
The Power of Freedom of Rate and Form
The primary reason cyber insurance thrives in the surplus lines market is Freedom of Rate and Form. In the admitted market, insurers must file their policy forms and premium rates with state insurance departments. This process can take months, making it difficult for insurers to respond when a new type of malware or a massive global data breach changes the risk landscape overnight.
Surplus lines insurers are not subject to these filing requirements. This allows them to:
- Tailor Coverage: Insurers can add specific endorsements for emerging threats like "social engineering" or "digital asset restoration" without waiting for state approval.
- Adjust Pricing: If a particular industry becomes a frequent target for hackers, surplus lines carriers can immediately adjust premiums to reflect the increased risk level, ensuring the market remains solvent and competitive.
- Experiment with Terms: Carriers can introduce innovative sub-limits or unique deductible structures to manage their exposure while still providing necessary protection to the policyholder.
Why Cyber Insurance is Moving to Surplus
Underwriting Challenges and the Diligent Search
Underwriting cyber risk in the surplus lines market requires a deep understanding of technical vulnerabilities. Unlike a standard fire policy, where the risk is static, cyber risk is dynamic. Underwriters often require potential insureds to complete exhaustive applications detailing their multi-factor authentication (MFA) protocols, encryption standards, and employee training programs.
For surplus lines brokers, placing cyber insurance often involves the diligent search requirement. In most jurisdictions, a broker must first attempt to place the coverage with admitted insurers. Only after receiving a specified number of rejections (often three) can the risk be exported to the surplus lines market. However, as cyber risks become more severe, many states have added cyber insurance to their "Export Lists," which exempts the broker from the diligent search requirement for that specific class of business, streamlining the placement process for agents and their clients.
Students preparing for their licensure should practice these concepts with our practice Surplus Lines questions to understand how different states handle export lists and diligent search affidavits.
Exam Tip: The Role of the Surplus Lines Broker
On the Surplus Lines exam, remember that the surplus lines broker (or producer) is the one responsible for ensuring that the diligent search is performed and that the appropriate surplus lines taxes are collected and remitted to the state. In the context of cyber insurance, the broker must also ensure the client understands that the policy is being issued by a non-admitted carrier and is not backed by the state guaranty fund.
The Future of Cyber in the Non-Admitted Market
As digital transformation continues across all sectors, the demand for robust cyber insurance will only increase. The surplus lines market is expected to remain the primary laboratory for cyber products. Once a specific type of cyber coverage becomes standardized and predictable, it may eventually migrate to the admitted market. However, as long as hackers develop new methods and technology continues to advance, the flexibility of the surplus lines market will be necessary to protect businesses from the financial fallout of a digital catastrophe.
Key areas of focus for future surplus lines cyber policies include systemic risk (where one event affects thousands of companies simultaneously) and war exclusions (defining whether state-sponsored cyber-attacks constitute an act of war).