Cyber Liability Insurance: A History

Most people buying cyber liability insurance today have no idea how the product came to exist -- or why their policy looks the way it does. This course traces the full arc of cyber insurance from its origins as an afterthought rider on general liability policies in the late 1990s to the volatile, high-stakes market of today.

Understanding the history is not just interesting. It explains the exclusions, the premium swings, the underwriting questionnaires, and the coverage gaps that catch policyholders off guard when they actually need to file a claim. Every clause in a modern cyber policy has a story behind it -- a breach, a court case, an act of state-sponsored malware, or a carrier that paid out far more than it expected and rewrote its terms the following year.

You will follow the market from the first manuscript endorsements written for dot-com companies through the TJX and Heartland breaches that proved the product was necessary, through the NotPetya war exclusion battles that shook the market to its foundation, through the ransomware-driven hard market of 2020 to 2023 when rates tripled and coverage contracted, and into the present moment where the industry is still figuring out how to price and backstop a risk that can be simultaneously everywhere at once.

By the end of this course you will be able to read a cyber policy not just as a legal document but as a historical artifact -- and understand why it says what it says.

Who This Is For

• Risk managers, CFOs, and executives who want to understand their cyber policy beyond the summary page
• Insurance brokers and advisors who want historical context to explain coverage terms and exclusions to clients
• Security professionals who interact with cyber insurance requirements and want to understand where they came from
• Anyone who has been surprised by a coverage denial or exclusion and wants to understand why the policy was written that way