16.3 Cyber, Aviation, and Other Specialty Lines

Cyber insurance: first-party vs. third-party

Cyber is the fastest-growing specialty line on the exam. The single most-tested concept is the split between first-party and third-party coverage:

• First-party - the insured's own losses from a breach: forensic investigation, business interruption / extra expense from network downtime, data restoration, cyber extortion / ransomware payments, and breach-notification costs.
• Third-party - the insured's liability to others: lawsuits from customers whose data leaked, regulatory fines and penalties (where insurable), and media/network security liability.

Most cyber forms are written claims-made, so the claim must be made (and reported) during the policy period or extended reporting period, and a retroactive date bars acts committed before it. A common trap: business interruption from a cyber event is a first-party coverage, while a class-action by affected customers is third-party. Cyber typically carries its own sublimits (for example, a $5,000,000 policy may sublimit cyber extortion to $250,000) and a waiting period (an hourly deductible, e.g., 8 hours) before business-interruption coverage begins.

Distinguish a few terms candidates confuse: a data breach is unauthorized access to protected information; a network security failure is a broader systems compromise; and social engineering / phishing fraud (an employee tricked into wiring funds) is often a separate sublimited coverage or an exclusion unless endorsed.

Social engineering is frequently confused with funds transfer fraud (an unauthorized electronic transfer). Many losses also overlap with the Computer Fraud insuring agreement of the commercial crime form, so the exam may ask which policy responds - cyber for breach-response and BI, crime for direct theft of money.

Aviation insurance

Aviation parallels auto in structure: physical damage (called hull) plus liability, but with aviation-specific wrinkles.

• Hull coverage - physical damage to the aircraft. Forms distinguish in-motion (in flight or taxiing) from not-in-motion (parked/moored); not-in-motion rates are lower because most crashes happen in motion.
• Liability - bodily injury and property damage to others. Watch the passenger liability distinction: "BI excluding passengers" is cheaper than "BI including passengers." A single limit including passengers is the broadest.
• Admitted vs. non-admitted - much aviation risk is written in the surplus lines market.

A worked split-limit example: a policy reads "$1,000,000 BI per person / $5,000,000 BI per occurrence / $1,000,000 PD per occurrence, excluding passengers." If the insured aircraft damages a hangar ($800,000) and injures two ground workers ($600,000 each), the BI pays $600,000 + $600,000 = $1,200,000 (each within the $1,000,000 per-person cap and total within $5,000,000), and PD pays $800,000 (within $1,000,000). Total = $2,000,000. Passenger injuries would be excluded under this form.

Aviation policies also tie coverage to defined uses (pleasure & business, industrial aid, commercial, special use) and to pilot warranties - if a pilot not meeting the named qualifications (minimum hours, ratings, medical certificate) is flying, coverage can be void. Ground risks not in motion may also include hangarkeepers liability for damage to aircraft of others in the insured's care, custody, or control - a CCC exposure parallel to garage operations in auto.

Marine, umbrella, and management liability

Ocean marine has four classic coverages: Hull (the vessel), Cargo (goods in transit), Freight (the income the carrier earns - lost if cargo is not delivered), and Protection & Indemnity (P&I) (the vessel's liability). Ocean marine introduces marine-specific perils and the Inchmaree clause (covering certain machinery and crew-negligence losses).

Inland marine covers movable property and instrumentalities of transportation - bridges, tunnels, communication towers - plus floaters (jewelry, fine arts, contractors' equipment, the commercial Accounts Receivable and Valuable Papers forms). Many inland marine forms cover property on an all-risk basis with agreed value.

Umbrella / excess liability sits above underlying policies. Key terms:

• Underlying limit - the primary policy that must be exhausted first (e.g., $1,000,000 CGL).
• Self-Insured Retention (SIR) - the amount the insured pays for losses the umbrella covers but the underlying policy does not (umbrella's "deductible").

Worked example: a $5,000,000 umbrella sits over a $1,000,000 CGL with a $10,000 SIR. A covered judgment is $4,500,000. The CGL pays its $1,000,000, the umbrella pays the next $3,500,000 (up to its $5,000,000 limit). If instead the loss were a covered exposure not in the CGL, the insured pays the $10,000 SIR and the umbrella drops down to pay above it.

Management and professional liability, and TRIA

The exam groups several claims-made specialty liability lines:

• D&O (Directors & Officers) - protects company leadership from suits over management decisions; Side A/B/C structure.
• E&O / Professional Liability - covers professional negligence (errors and omissions) for agents, accountants, lawyers, contractors; excludes intentional/dishonest acts.
• EPLI (Employment Practices Liability) - wrongful termination, discrimination, harassment claims by employees.

Because these are claims-made, the retroactive date and Extended Reporting Period (ERP / "tail") are tested: a claim is covered only if the wrongful act occurred on/after the retro date and the claim is made/reported during the policy period or ERP.

Terrorism is excluded by many forms but the Terrorism Risk Insurance Act (TRIA) creates a federal backstop. Insurers must offer terrorism coverage for certified acts; the federal government shares losses above an industry-wide trigger and a per-insurer deductible. A trap: TRIA covers certified acts of terrorism only - an uncertified domestic act may fall outside the backstop, and the insured must have accepted (and paid for) the terrorism offer for coverage to apply.