Cyber Insurance

Cyber insurance covers the financial costs following a cyber incident — including breach investigation, data recovery, business interruption losses, third-party liability, regulatory fines, and crisis management. First-party coverage protects your own losses; third-party coverage protects you against claims from others.

Not currently mandatory by law, but increasingly required by large corporate clients, government tender contracts, and financial regulators. The UAE PDPL (Personal Data Protection Law) increases the financial risk of data breaches, making cyber coverage highly advisable for all data-holding businesses.

Ransom payment coverage is typically included where payment is legally permitted and considered the most pragmatic response. The policy also covers specialist negotiation support, IT recovery costs, and business interruption losses whether or not a ransom is paid.

Insurers expect basic cyber hygiene: regular data backups, multi-factor authentication (MFA), up-to-date security patches, employee security training, and a written incident response plan. Better security practices lead to better terms and lower premiums.

Standard general liability (GL) policies typically exclude or severely limit cyber-related claims. A standalone cyber policy is essential to fill this gap. Do not assume your existing policies provide adequate cyber protection without specialist review.

Premiums are based on industry sector, revenue, volume of personal data held, security controls in place, prior claims history, and the indemnity limits required. We help you present your risk profile in the best light to secure competitive terms.