16.3 Cyber, Aviation, and Other Specialty Lines

Key Takeaways

  • Cyber liability splits into first-party coverage (the insured's own breach response, business interruption, and extortion) and third-party coverage (liability to others for a privacy breach); it is written claims-made.
  • Aviation insurance uses aircraft hull coverage (often split into in-motion and not-in-motion) plus aircraft liability, with bodily injury frequently written on a single-limit or split-limit basis.
  • Inland marine covers property in transit and mobile/floating risks, while ocean marine covers hull, cargo, freight, and protection & indemnity liability, settled with named perils and average clauses.
  • Specialty lines such as Difference in Conditions (DIC), kidnap & ransom, and event cancellation fill gaps left by standard property and liability forms.
  • Most specialty professional and management lines (cyber, D&O, EPL) are claims-made and require attention to the retroactive date and extended reporting period (tail).
Last updated: June 2026

Cyber Liability Insurance

Standard CGL and property forms were never designed for data breaches, so cyber liability evolved as a stand-alone specialty line. It splits cleanly into two halves:

HalfWhat It PaysExamples
First-partyThe insured's own lossesBreach-response/forensics, notification costs, credit monitoring, business interruption from a network outage, cyber extortion / ransomware payments, data restoration
Third-partyThe insured's liability to othersPrivacy-breach lawsuits, regulatory fines/defense, media/content liability, payment-card (PCI) assessments

Quick Answer: First-party cyber pays the insured's own bills; third-party cyber pays what the insured owes others when their data is exposed.

Trigger: Cyber liability is typically written claims-made, like other management and professional lines. The claim must be first made during the policy period and the wrongful act must occur on or after the retroactive date. A departing or transitioning insured may need an Extended Reporting Period (tail).

Sublimits and traps: Cyber policies are riddled with sublimits - extortion, regulatory fines, and social-engineering fraud often carry separate, lower caps than the policy aggregate. Social-engineering / funds-transfer fraud (a fake invoice tricking an employee into wiring money) is frequently a low sublimit or an endorsement, not the full limit. Exams test that cyber is claims-made and that first-party and third-party coverages are distinct.

Aviation Insurance

Aviation is a specialty package combining property (hull) and liability for aircraft owners and operators.

CoverageWhat It Insures
Hull - in motionPhysical damage while the aircraft is taxiing, in flight, or moving
Hull - not in motionPhysical damage while parked or moored
Aircraft liabilityBodily injury and property damage to third parties and passengers
Medical paymentsCrew/passenger medical costs regardless of fault

Limit structures. Aviation liability is written either as a Combined Single Limit (CSL) - one limit for all bodily injury and property damage per occurrence - or on a split-limit basis, often expressed as per-person / per-occurrence / property-damage much like auto.

Worked Example: Split Limits

An aircraft policy shows split limits of $100,000 / $500,000 / $100,000 with an additional per-passenger sublimit. A crash injures three passengers with damages of $150,000, $90,000, and $80,000, plus $60,000 of ground property damage.

  • Passenger 1: capped at the $100,000 per-person limit (loss $150,000 exceeds it).
  • Passenger 2: paid $90,000 (within the per-person limit).
  • Passenger 3: paid $80,000 (within the per-person limit).
  • Bodily injury subtotal: $100,000 + $90,000 + $80,000 = $270,000, within the $500,000 per-occurrence cap.
  • Property damage: $60,000, within the $100,000 property limit.
  • Total paid: $330,000.

Under a $1,000,000 CSL, the same losses ($270,000 BI + $60,000 PD = $330,000) would be paid from one pooled limit, with no per-person cap squeezing Passenger 1's recovery - illustrating why CSL is more flexible than split limits.

Marine: Inland and Ocean

Inland marine insures property that moves or is mobile, plus instrumentalities of transportation and communication. It grew out of marine cargo policies but stays on land. Common forms include transit (motor-truck cargo), contractors' equipment, builders' risk, bailee coverage (a dry cleaner holding customers' goods), and fine-arts/jewelers' block floaters. Many inland-marine floaters are written open-perils and follow property as it moves between locations.

Ocean marine is one of the oldest insurance lines and bundles four coverages:

CoverageInsures
HullThe vessel itself
CargoGoods being shipped
FreightLost shipping revenue
Protection & Indemnity (P&I)The owner's liability for injury, collision, and pollution

Ocean marine commonly applies an average clause (a coinsurance-like provision) and concepts of general average, in which a sacrifice made to save the voyage is shared proportionally by all interests (ship, cargo, freight).

Worked Example: Average Clause

An ocean cargo policy with an 80% average (coinsurance) clause insures a $400,000 shipment for only $240,000. The required amount is 0.80 x $400,000 = $320,000. After a $50,000 partial loss, recovery is reduced by the penalty ratio: $240,000 / $320,000 = 0.75, so the insurer pays 0.75 x $50,000 = $37,500, less any deductible. Insuring to the full $320,000 would have paid the loss in full. The average clause works exactly like property coinsurance, penalizing underinsurance at the time of loss.

Other Specialty Lines

  • Difference in Conditions (DIC): broadens a property program by covering perils the underlying policy excludes - typically flood and earthquake - often layered above NFIP limits.
  • Kidnap & Ransom (K&R): reimburses ransom, crisis-response, and related expenses; sold confidentially.
  • Event cancellation: pays lost revenue and expenses when a covered event is canceled or postponed.
  • Surplus lines: for hard-to-place risks placed with non-admitted carriers through a surplus-lines broker after the admitted market declines.

Common Exam Traps

  • Cyber is claims-made and splits into first-party vs. third-party.
  • Split limits cap each person separately; a CSL pools the limit.
  • Inland marine = movable/land; ocean marine = hull, cargo, freight, P&I.
  • DIC adds flood/earthquake; do not confuse it with the NFIP itself.
Test Your Knowledge

A company's employee is tricked by a fraudulent email into wiring $200,000 to a criminal, and separately the company faces a lawsuit from customers whose data was stolen. Under a typical cyber policy, how are these characterized?

A
B
C
D
Test Your Knowledge

An aircraft liability policy carries split limits of $100,000/$500,000/$100,000. One injured passenger has $150,000 in damages. How much is paid for that passenger, assuming the per-occurrence limit is not exhausted?

A
B
C
D