Cyber insurance may provide cover for specified incident response costs, liability or business interruption exposures, subject to the policy definition of a cyber event, waiting periods, sublimits and exclusions.

Cyber risks across connected energy businesses

Renewable energy companies may use cloud monitoring, remote access, customer portals, connected inverters, control systems, operational technology and supplier platforms. The exposure depends on the systems the business owns, manages or supports.

Cyber information insurers may request

• Use of multi-factor authentication and privileged access controls
• Backups, patching and incident response arrangements
• Remote access to customer or operational systems
• Personal information and payment data held
• Third-party providers and cloud platforms
• Prior cyber incidents or claims

Cover sections to review

Available policies may include specified incident response services, data restoration, cyber extortion, privacy liability or cyber business interruption. Cover is not automatic for every system interruption. Policy definitions, security conditions, waiting periods, exclusions, sublimits and service providers determine the response.

Cyber insurance does not replace physical property, machinery breakdown, public liability or professional indemnity insurance. Businesses may need to review how policies treat cyber-related physical damage or service interruption.

Questions about cyber insurance

Does cyber insurance cover an outage in a customer’s energy system?

That depends on the insured’s role, the event and the wording. Third-party service interruption and physical damage may be restricted or excluded.

Can a small technology supplier obtain cyber cover?

Some markets consider smaller businesses, subject to security information, revenue, data and service exposures.

Arrange a review

Describe your systems, services, data, customer access and current cyber controls so insurers can assess the risk.