Every answer and its explanation appears here once you have finished the path. Each one then links to the matching glossary entry, where the concept is set out in full with its worked example.
1. In 2017, industrial companies halted by destructive malware claim on their property policy rather than their cyber policy. Why?
Because they held a small or nonexistent cyber policy and a considerable property policy: the claim went where the money was, on a contract that did not mention cyber, and insurers met it with the inherited war exclusion
The origin of the litigation is an asymmetry of amounts and not a question of characterization: the largest cover was the one that had provided for nothing. The war exclusion answer swaps the contracts: the property policy carried the inherited exclusion, and it is the one that was invoked. The physical damage answer credits the event with a nature it did not have in most files, where systems were wiped without a machine being harmed. The attribution answer puts at the start what came later: the 2018 government attributions served insurers as an argument, they did not decide which policy was claimed on.
Glossary entry →2. Two major disputes turned on applying an inherited war exclusion to a state-attributed cyberattack. What do they teach, whatever their outcome?
That the burden of uncertainty falls on the insurer, because an exclusion is a defense and whoever invokes it bears the demonstration
This rule holds whoever wins, and even without a judgment, since one of the two cases settled in 2022: that is what makes it transferable to the next new risk. The war answer inverts what was held: the 2023 decision found that the inherited wording aimed at war in the ordinary sense, hence not this event. The deprived of effect answer overgeneralizes an assessment made on a precise wording in a precise file. The attribution answer confuses a diplomatic act, one item of evidence among others, with a contractual characterization, which the judge keeps.
Glossary entry →3. The market's response followed two parallel tracks. What did each do, and why distinguish them?
The UK prudential supervisor (PRA, 2017) created the obligation to look, asking insurers to identify non-affirmative exposure, quantify it and say how they would handle it, without imposing a solution; the market supplied the words, as standardized clauses for insertion in non-cyber policies
The distinction bears on the nature of what was asked, measure on one side, write on the other, and it explains why three drafting outcomes coexist today. The answer having supervisors impose exclusion credits them with a coverage decision they never made, and it is the source of the period's most widespread misreading. The answer merging the tracks erases exactly what separates them, one creating a duty to look and the other a tool. The answer inverting the order puts the duty to measure after the clauses, when it is what made their use necessary. Lloyd's did require in 2019 (bulletin Y5258) that every policy explicitly cover or exclude cyber, but it acted as manager of its own market, after the PRA's request to measure.
Glossary entry →4. A professional hears "clarification" and understands "exclusion." What does that shortcut cost?
They will be wrong on half the contracts they read, the three outcomes coexisting in the same programs, and they will forfeit an argument where the policy actually grants something
The cost of this shortcut goes beyond a reading error: an argument lost at the moment the policy granted something. The exclusion answer repeats the misreading in its most common form. The affirmative cover answer credits supervisors with a coverage requirement they never made, since they asked insurers to measure and to state, not to cover. The write-back answer picks the subtlest of the three outcomes and makes the same mistake as the other two, replacing a reading with a statistic.
Glossary entry →5. A decade on, where is silent cyber found, and what explains that distribution?
In mid-sized policies, local contracts, liability covers and accessory extensions: standardization came from the top and pushed silence to the contracts nobody re-reads
The market runs at two speeds, and knowing that tells you where to spend reading effort rather than spreading it evenly. The disappearance answer confuses the spread of a tool with its universal application. The large property and transport answer reverses the direction of that spread: those are precisely the ones now carrying an explicit position, where silence is no more than a reading task. The cyber policy answer names a real difficulty, the variability of definitions, which is a problem of comparing affirmative covers and not a silence.
Glossary entry →