Skip to content

Learning cyber insurance online: where to start?

The 8 glossary entries behind this answer, woven across its 18 categories

The answer

Short answer. Search for an online cyber insurance course and most of what comes back teaches cybersecurity: how to defend a network, which tells you little about reading a policy. To learn to read and underwrite a cyber contract, start with what the policy pays and in what order, then aggregation, underwriting and silent cyber, and leave the war exclusion for last.

What the search returns

The first results come from Coursera and, in French, from the CNED and the CNAM. They are serious courses on information security. An underwriter picks up vocabulary there and little else: nothing in them explains why the response costs sub-limit has to be read before the loss, or how a thousand laptops encrypted in one night become a single event under the contract.

On the insurance side, two offers show their price, in opposite formats. IFPASS runs "Assurance des cyber risques", one 7-hour day in Paris, at €761. The UK's CII sells "Cyber risk and insurance" online, assessed by a 30-question multiple-choice test, £66 for a member and £86 including VAT for everyone else. Prices read on their sites on October 31, 2026. The first means being in Paris; the second comes from a British institute, and the 72-hour police complaint that French law requires is not its subject.

The order, and why this one

Nobody should talk accumulation to someone who does not yet know what the policy pays. The Academy's Cyber specialisation is five courses, meant to be read in this order.

CY-1, "What does a cyber policy cover, and in what order?" Six lessons, about fifty minutes. A cyber policy houses four covers in one contract: response costs, business interruption, third-party liability and extortion. The same incident triggers all four, and the order in which they are called decides the final amount. An insured that notifies "my cyber loss" has said nothing useful yet.

CY-2, "One event or several?" Seven lessons on aggregation: the window that turns claims into one event, the cloud outage, reinstatement after the first large loss, and the sanction that strikes the ransom cover.

CY-3, "What does an underwriter look at before saying yes?" The questionnaire, the controls that actually carry weight, pricing without loss history, and the decline. This is the course where you move to the other side of the desk.

CY-4, "Where does cyber hide in the other policies?" Silent cyber: a property or marine policy that says nothing about cyber still says something, and the last lesson draws up the inventory of that silence, policy by policy.

CY-5, "Who decides that a cyberattack is an act of war?" The LMA clauses since NotPetya, read word by word, then the Merck case: about 1.4 billion dollars claimed under property policies, a war exclusion rejected on appeal in New Jersey on May 1, 2023, a settlement on January 3, 2024. CY-5 can be read first out of curiosity. It reads better after CY-2, because the war exclusion is first of all an accumulation problem.

The exam, then the certificate

Each course ends with a six-question questionnaire. The pass mark, 70%, is shown before the first question: five correct answers out of six. Lessons, questionnaires and the displayed score are free.

Only the named, verifiable certificate showing your percentage is paid: €7.99 incl. VAT for a course, €11.99 incl. VAT for the specialisation. Sales are not open as of October 31, 2026, and the screen says so: "The certificate will be available soon." One exception, CY-1: its certificate is free, with a free account, for anyone who passes its questionnaire.

Each certificate carries a number such as AP-2026-K3F9Q-7B2E, which a third party can check on a public page, with no account. The page gives the certificate's status (valid or revoked, with the date and reason for withdrawal), the course path and the date it was obtained; the holder's name appears only with their consent. A refund or a payment dispute revokes the certificate.

Private certification issued by AlgoPolis under its sole authority. It is not registered with France Compétences, in either the RNCP or the specific register, and does not qualify for the French personal training account.

The path

  1. The Cyber specialisation, its five courses and their order.
  2. CY-1, starting with the lesson "The four families that get confused", then its questionnaire.
  3. CY-2 and "The aggregation window", then the exam.
  4. CY-3, starting from the underwriting questionnaire; the exam.
  5. CY-4 and "Three families of clause, and the one you hold"; the exam.
  6. CY-5, from where the four clauses come from to Merck and Mondelez; the exam.
  7. Alongside, the glossary: first-party covers, cyber event definition, silent cyber, cyber war clause.