Stand-alone policy
A contract dedicated to a specific risk, separate from traditional policies, such as a stand-alone cyber policy.
A stand-alone policy is a self-contained contract dedicated to one risk, designed and priced separately from traditional property or liability policies. In cyber, it has become the standard answer to silent cyber: the digital cover sits in its own contract, with scope, limits and exclusions spelled out. The insurer prices a clearly identified risk and tracks its accumulation more easily; the insured knows exactly what is covered. The alternative, cyber cover added by endorsement to an existing policy, is often narrower and leaves ambiguities about how the contracts fit together. Stand-alone policies still have their problems, chiefly overlaps or gaps with the insured's other policies, for example when a single loss falls under both cyber business interruption and a conventional liability cover. The contracts then have to be coordinated at the level of the insurance program.
A mid-sized industrial company renews its policies following the 2019 Lloyd's directives. Its broker recommends taking out a stand-alone cyber policy for 10 million euros, explicitly covering extortion, digital business interruption, data liability and incident-response costs. The property and liability policies are simultaneously amended to exclude cyber unambiguously, eliminating any risk of double recovery or coverage gap. Together they form a coherent program in which each policy knows exactly where the other's scope ends.
stand-alone policy, stand-alone, standalone cyber
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.