16.3 Cyber, Aviation, and Other Specialty Lines

Cyber Liability Insurance

Cyber insurance responds to data breaches, ransomware, and network failures. Coverage divides into two halves:

• First-party coverage pays the insured's own losses: data restoration, business interruption, cyber extortion (ransom) payments, breach notification costs, and credit monitoring for affected customers.
• Third-party coverage pays liability claims brought by others harmed by the breach, including defense costs and regulatory fines where insurable.

Most cyber policies are written on a claims-made basis, meaning the claim must be first made during the policy period (subject to a retroactive date). This contrasts with the occurrence trigger used by most property forms.

Cyber Coverage Grid

Exam trap: notification costs to affected customers are a first-party expense (the insured spends its own money to comply), even though the people notified are outsiders.

Aviation Insurance

Aviation coverage parallels auto coverage by separating physical damage from liability:

• Hull coverage insures physical damage to the aircraft. It may be written in motion, not in motion, or in flight, and often on an agreed value basis.
• Aviation liability covers bodily injury and property damage to others, frequently including passenger liability.

Limits are commonly expressed as a single limit (one amount for all bodily injury and property damage per occurrence) or with a per-passenger sublimit. For example, a policy may read $20,000,000 single limit with a $200,000 per-passenger limit, capping any one passenger's recovery while a combined limit applies to the whole occurrence.

Worked Example: Per-Passenger Sublimit

A charter policy carries a $5,000,000 single limit with a $250,000 per-passenger sublimit. An accident injures four passengers, each with $400,000 in damages (total claimed $1,600,000).

• Each passenger is capped at $250,000 by the sublimit.
• Payable per passenger: 4 x $250,000 = $1,000,000.
• The $5,000,000 single limit is not exhausted, but the per-passenger cap controls each individual claim.

The four passengers recover $250,000 each, not their full $400,000 losses, because the sublimit applies before the aggregate single limit.

Ocean Marine and Other Specialty Lines

Ocean marine insurance, one of the oldest lines, uses four traditional coverages:

• Hull - physical damage to the vessel.
• Cargo - the goods being transported.
• Freight - the income the carrier earns for transport.
• Protection and Indemnity (P&I) - the vessel owner's liability to others.

Other specialty exposures include professional liability (errors and omissions), directors and officers (D&O), and environmental / pollution coverage. When admitted carriers will not write an unusual risk, it moves to the surplus lines (excess and nonadmitted) market through a specially licensed surplus lines broker.

Cyber Liability — First-Party vs. Third-Party

Cyber is the fastest-growing specialty line, and the exam tests the split between the insured's own losses and its liability to others:

A standard property or CGL policy generally excludes electronic-data and cyber events (the ISO data exclusion), which is why a standalone cyber policy is required. Most cyber forms are written on a claims-made basis with a retroactive date.

Aviation Insurance Building Blocks

Aviation risks are excluded from standard auto and CGL forms and need specialty coverage:

• Hull — physical damage to the aircraft (in-motion, not-in-motion, or all-risk "in-flight" basis).
• Aircraft liability — bodily injury and property damage to third parties; may be single-limit or split between passengers and non-passengers.
• Admitted/non-admitted placement is common because few carriers write aviation.

The Surplus Lines Path

When no admitted (licensed) carrier will write an unusual or high-hazard risk, a specially licensed surplus lines broker places it with a non-admitted (eligible surplus lines) insurer. Key exam points: surplus lines insurers are not backed by the state guaranty fund, the broker must usually perform a diligent search of the admitted market first, and a surplus lines tax applies. This is the safety valve that lets hard-to-place exposures — large aviation, cyber, environmental, and unusual marine risks — find coverage outside the standard market.

Ransomware and Social-Engineering Distinctions

Within cyber, the exam may distinguish loss types. Cyber extortion / ransomware (first-party) pays the ransom-response costs and data restoration when an attacker locks systems. Social-engineering / funds-transfer fraud — an employee tricked into wiring money to a fraudster — is sometimes covered under crime (computer fraud) and sometimes under a cyber endorsement, and is a common gap if neither is endorsed. Because a standard property policy's electronic-data exclusion removes data and intangible-asset losses, a business that relies on data needs the standalone cyber form to fill the hole.

Environmental and Pollution Coverage

Standard CGL excludes most pollution (the absolute pollution exclusion), so environmental exposures move to specialty markets: Premises Pollution Liability (cleanup and third-party claims at owned sites), Contractors Pollution Liability (pollution from contracting operations), and storage-tank policies. These are usually written claims-made. A contractor whose work causes a fuel spill looks to a contractors pollution policy, not the CGL — a frequent multi-line exam scenario that ties the specialty-lines topic back to the exclusions on the standard forms.