CYBER RISK UNDERWRITING GUIDELINES

Transcription

1 CYBER RISK UNDERWRITING GUIDELINES for NATIONWIDE MUTUAL INSURANCE COMPANY Original Effective As of November 15, 2014 Revision Effective July 27, 2015 This document sets forth the forms, rates and eligibility agreed by the Company and the Reinsurer and is incorporated by reference into Reinsurance Agreement Reference Number In the event of a conflict between the terms of the Reinsurance Agreement and the terms of the Underwriting Guidelines, the terms of the Underwriting Guidelines shall prevail. Capitalized terms not defined in these Underwriting Guidelines shall have the meanings assigned to them in the Reinsurance Agreement. CYBER RISK COVERAGE SECTION I -- GENERAL RULES AND PREMIUM DETERMINATION Eligibility: Insureds, except those in a class of business listed in Section III Excluded Classes, are automatically eligible for Cyber Risk. If a that was in compliance with the eligibility rules at the time of its issuance subsequently becomes non-compliant, that will be covered under the Reinsurance Agreement until its next renewal or expiration. s, s and Deductibles: Cyber Risk is available to insureds in four coverage, limit and deductible options: 1. ed First Party Computer Attack (Data Restoration and System Restoration coverages only) : $50,000 Deductible: $5,000 per Computer Attack 2. Full First Party Computer Attack : 100,000 Deductible: $10,000 per Computer Attack 3. Full Third Party Network Security Liability : $100,000* Deductible: $10,000 per Network Security Liability Suit 4. Full First Party Computer Attack : 100,000 Deductible: $10,000 per Computer Attack and Full Third Party Network Security Liability : $100,000* Deductible: $10,000 per Network Security Liability Suit 1.

2 In order to select one of the coverage options described above, changes will need to be made to the schedule at the top of the endorsement. If full first party coverage is included, the following limit, sublimits and deductible will appear in Section 1 - Computer Attack: Computer Attack $100,000 Sublimits Data Re-creation $5,000 Loss of Business $10,000 Public Relations $5,000 Occurrence Computer Attack Deductible $10,000 Occurrence For limited first party coverage the following limit, sublimits and deductible will appear in Section 1 - Computer Attack: Computer Attack $50,000 Sublimits Data Re-creation $0 Loss of Business $0 Public Relations $0 Occurrence Computer Attack Deductible $5,000 Occurrence If no first party coverage is included, the following limit, sublimits and deductible will appear in Section 1 - Computer Attack: Computer Attack $0 Sublimits Data Re-creation $0 Loss of Business $0 Public Relations $0 Occurrence Computer Attack Deductible $0 Occurrence If full third party coverage is included, the following limit, sublimits and deductible will appear in Section 2 Network Security Liability: Network Security Liability $100,000* Network Security Liability Deductible $10,000 Occurrence Network Security Liability Optional 3 rd Party Business Information: Included If no third party coverage is included, the following limit, sublimits and deductible will appear in Section 2 Network Security Liability: Network Security Liability $0 Network Security Liability Deductible $0 Occurrence Cyber Risk is only available in the coverage combinations described above. s, limits and deductibles may not be changed or swapped between options. Each listed coverage option must always be offered with the associated limit and deductible. * In Arkansas, Louisiana, Montana, New Hampshire, Oklahoma, South Dakota and Vermont, the $100,000 Network Security Liability limit is replaced with a $50,000 Network Security Liability and a $50,000 Network Security Defense. 2.

3 Determination: The below listed premiums are annual gross premiums per for the chosen coverage, limit and deductible option. s may be pro-rated for short or odd term Policies. These premiums are not subject to further modification by the application of any other factors (e.g. company deviations, IRPM factors, or expense modifications). Businessowners Policies ed First Party Computer Attack ed First Party Computer Attack (Data Restoration and Systems Restoration s Only) Computer Attack $50,000 $5,000 $46 Full First Party Computer Attack and Full Third Party Network Security Liability s Network Security Liability Suit Full First Party Computer Attack $100,000 $10,000 $135 Full Third Party Network Security Liability $100,000* $10,000 $200 Full First Party and Full Third Party $335 General Liability Policies ed First Party Computer Attack ed First Party Computer Attack (Data Restoration and Systems Restoration s Only) Computer Attack $50,000 $5,000 $53 Full First Party Computer Attack and Full Third Party Network Security Liability s Network Security Liability Suit Full First Party Computer Attack $100,000 $10,000 $155 Full Third Party Network Security Liability $100,000* $10,000 $230 Full First Party and Full Third Party $385 3.

4 SECTION II -- Cyber Risk COVERAGE FORMS The following forms have been approved by the Reinsurer. BOP CYBER RISK LIABILITY FORMS Base Forms PB 58 07, PB 58 08, PB 59 07, PB 59 08, Countrywide Base Form All states except AR, MT, NH, SD, VT, NC, NY Split s Base Form - AR, MT, NH, SD, VT New York Specific Form North Carolina State Amendatory Endorsements PB 90 03, PB 90 06, PB 90 09, PB 90 12, PB 90 18, PB 90 19, PB 90 24, PB 90 25, PB 90 28, PB 90 37, PB 90 38, PB 90 40, PB 90 42, PB 90 44, PB 90 45, PB 90 49, Arkansas Connecticut Florida Illinois Maine Maryland Missouri Montana New Hampshire Pennsylvania Rhode Island South Dakota Texas Vermont Virginia Wyoming SERPs PB 43 50, PB 43 51, PB 43 52, Countrywide Virginia Wyoming 4.

5 GL CYBER RISK LIABILITY FORMS BASE FORMS CG 8013, Countrywide, All States Except AR,CT,FL,ME,MD, MO, MT,NH,NY,NC,PA,RI,SD,TX, VT,VA, WY State Amendatory Endorsements CG 8014, CG 8015, CG 8016, CG 8017, CG 8019, CG 8018, CG 8020, CG 8021, CG 8022, CG 8023, CG 8024, CG 8025, CG 8026, CG 8027, CG 8029, CG 8028, CG 8030, Arkansas Connecticut Florida Illinois Maine Maryland Missouri & Rhode Island Montana New Hampshire New York North Carolina Pennsylvania South Dakota Texas Vermont Virginia Wyoming SERPs CG 8031, CG 8032, CG 8033, CG 8034, Countrywide, All states except CT, MD, ME, SD, VA, WY CT, MD, ME, SD Virginia #1 Virginia Removed or Excluded CG 8035, Wyoming #1 CG 8036, Wyoming Unlimited 5.

6 SECTION III -- EXCLUDED CLASSES OF BUSINESS In addition to the excluded classes listed below, insureds with any invalid or unknown occupancy codes are ineligible for Cyber Risk. The following are the generally excluded classes: Adult Business Gambling or Gaming Financial Institutions Municipalities Schools, Colleges and Universities Currently, no excluded classes currently appear in the Company s portfolio. SCTION IV DOCUMENT UPDATES This section summarizes updates made to an existing final Underwriting Guidelines document with the corresponding effective date of the update. Date of Update August 14, 2014 August 20, 2014 August 26, 2014 August 29, 2014 November 10, 2014 July 27, 2015 Description Removed Banks - Lessor s Risk from the list of ineligible classes Revised list of forms and states Removed New York endorsement from forms list Added NC & NY to the list of states excluded from the countrywide form; removed (it is a lessor s risk class) and (it is a dwelling class code) from the ineligible classes of business. Added Determination tables for General Liability policies. Added GL forms and states 6.