16.3 Cyber, Aviation, and Other Specialty Lines

Cyber Liability Insurance

Standard CGL and property forms were not designed for data breaches, and ISO added explicit data-breach exclusions (such as the CG 21 06 / CG 21 07 access-or-disclosure exclusions) to the Commercial General Liability form, pushing this exposure into standalone cyber liability policies. Cyber coverage splits into two structures the exam emphasizes:

• First-party coverage - the insured's own losses: breach-response and notification costs, forensic investigation, data restoration, business-interruption from a network outage, cyber-extortion (ransomware) payments.
• Third-party (liability) coverage - claims by others: failure to protect private information, network security liability, media/content liability, and regulatory fines/defense where insurable.

Most cyber policies are written on a claims-made basis with a retroactive date, so the wrongful act must occur on or after that date and the claim must be reported during the policy period (or extended reporting period).

Cyber underwriting increasingly requires controls such as multi-factor authentication and offline backups, and many policies now carry coinsurance or sublimits specifically on ransomware/cyber-extortion and on dependent (contingent) business interruption from a vendor's outage.

Social-engineering / funds-transfer fraud - where an employee is tricked into wiring money - is frequently a separate sublimited insuring agreement and overlaps the Commercial Crime program, so the exam tests which form responds. Regulatory exposure (state breach-notification statutes, HIPAA, PCI fines) is what makes standalone cyber essential rather than relying on endorsements.

Aviation Insurance

Aviation is a specialty, non-ISO line written largely by specialty markets, but the exam expects you to recognize its principal coverage parts:

A central aviation exam point is the limitation of use / pilot warranty: coverage typically applies only when the aircraft is operated for the stated purpose of use (pleasure-business, industrial aid, commercial, etc.) and by a named or qualified pilot meeting stated certificate, rating, and hour requirements. Operating outside these warranties can void coverage.

Liability limits are written two ways the exam contrasts. A single limit each occurrence (e.g., $1,000,000 combined single limit) caps total bodily injury and property damage per event. A split / sublimit approach shows a per-occurrence limit with a per-passenger sublimit - for example $1,000,000 per occurrence but $100,000 per passenger seat - which can leave passengers under-protected on a fully loaded aircraft.

Hull coverage may be 'all-risk' ground and flight, all-risk not-in-flight, or all-risk not-in-motion, with the narrowest (not-in-motion) excluding taxiing and flight damage.

Inland Marine, Ocean Marine, and Other Specialty Lines

The exam groups several remaining specialty lines under property-floater and transit concepts:

• Inland Marine - covers property that moves or is held off-premises, plus 'instrumentalities of transportation/communication' (bridges, tunnels). Written on the Commercial Inland Marine Coverage Part with filed and non-filed classes; common floaters include Contractors Equipment, Accounts Receivable, Valuable Papers, Electronic Data Processing, and the Transportation/Motor Truck Cargo forms.
• Ocean Marine - the oldest line; four parts are Hull, Cargo, Freight, and Protection & Indemnity (P&I) liability. Coverage uses named perils ('perils of the sea') and concepts like general average (shared loss among all interests when cargo is sacrificed) and particular average (partial loss borne by one interest).
• Boiler & Machinery / Equipment Breakdown - covers sudden mechanical/electrical breakdown excluded by standard property forms.
• Umbrella/Excess - sits above primary CGL, auto, and employers liability, providing higher limits and (true umbrella) some broader 'drop-down' coverage subject to a self-insured retention (SIR).

Specialty-Lines Exam Traps

• Cyber is claims-made - watch the retroactive date and reporting requirements; do not confuse it with occurrence-based CGL.
• Aviation warranties are conditions precedent - flying outside the stated use or by an unqualified pilot can void hull and liability coverage.
• Inland vs. ocean marine - inland marine covers domestic movable/over-land property; ocean marine covers waterborne voyages plus P&I liability.
• Umbrella requires underlying limits - a true umbrella demands scheduled primary limits be maintained; failure to maintain them makes the insured responsible for the gap as if the underlying limit were still in place.
• Equipment breakdown fills the property-form exclusion for mechanical/electrical/steam-pressure breakdown, including resulting damage.

First-Party vs. Third-Party Cyber

Cyber policies split into first-party coverage (the insured's own losses: breach response, forensics, notification costs, credit monitoring, business interruption from a network outage, cyber extortion/ransomware) and third-party coverage (liability to others: privacy lawsuits, regulatory fines where insurable, media/content liability). A ransomware payment and breach-notification expense are first-party; a customer class action over leaked data is third-party. This split is the core cyber exam distinction.

Aviation Coverage Parts

Aviation is non-standard/specialty (no ISO form), so coverage is manuscript and underwritten on pilot hours and ratings. Hull insures the plane; aircraft liability insures harm to others — the hull-vs-liability split mirrors auto.