16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Surplus (excess) lines insurers are non-admitted, are not backed by the state guaranty fund, and require a licensed surplus lines broker to perform a diligent search of the admitted market first.
- Cyber coverage splits into first-party grants (breach response, network business interruption, cyber extortion, data restoration) and third-party grants (network security/privacy and media liability); CGL and property forms exclude electronic data.
- Cyber and professional liability are usually claims-made, requiring an active retroactive date and an Extended Reporting Period (tail) on cancellation, unlike occurrence-based CGL.
- Aviation insurance uses hull (physical damage, often agreed value) and liability (often split passenger vs. public limits), with per-occurrence caps limiting total payouts in multi-injury losses.
- Other specialty lines include professional liability/E&O, D&O, EPLI, inland marine floaters, and Difference in Conditions (DIC) policies that fill gaps and add flood/earthquake.
Specialty and Surplus Lines
Specialty lines cover exposures that standard admitted markets price poorly or decline: cyber, aviation, professional liability, environmental, and unusual property. Many are written in the surplus (excess) lines market through non-admitted insurers.
Quick Answer: Surplus lines insurers are NOT licensed (admitted) in the state but are approved to write coverage unavailable from admitted carriers. Their policies are not protected by the state guaranty fund, and a licensed surplus lines broker must perform a diligent search of the admitted market first.
Cyber Liability Insurance
Cyber policies split into first-party (the insured's own losses) and third-party (liability to others) coverage. There is no single ISO standard form, but exam content tracks these grants:
| Coverage | Type | Pays For |
|---|---|---|
| Data breach response | First-party | Notification, credit monitoring, forensics, PR |
| Business interruption (network) | First-party | Lost income from a system outage |
| Cyber extortion | First-party | Ransomware payments and negotiation |
| Data restoration | First-party | Recreating lost/corrupted data |
| Network security/privacy liability | Third-party | Lawsuits from a breach of others' data |
| Media/content liability | Third-party | Online defamation, IP infringement |
Trap: Standard CGL and property forms generally exclude electronic data and cyber events (ISO added exclusions like CG 21 06 and CG 21 07), so a dedicated cyber policy is required.
Claims-Made vs. Occurrence
Most cyber and professional liability is written on a claims-made basis. Compare:
- Occurrence: Covers injury/damage that occurs during the policy period, regardless of when the claim is filed (typical CGL).
- Claims-made: Covers claims first made during the policy period (or extended reporting period), for acts after the retroactive date.
Exam Key: A claims-made policy needs an active retroactive date and may require an Extended Reporting Period (ERP / "tail") when canceled, so claims reported after termination for earlier covered acts are still paid.
A retailer's network is breached and customer card data is stolen. Which cyber coverage pays the cost to notify affected customers and provide credit monitoring?
Aviation Insurance
Aviation is a specialty line because of catastrophic severity and federal (FAA) regulation. Coverage parallels auto but uses aviation terminology:
- Hull coverage - physical damage to the aircraft. Written as in-motion, not-in-motion, or all-risk ground and flight; often settled at agreed value.
- Liability coverage - bodily injury and property damage to third parties. Often split: passenger liability vs. public liability (non-passenger).
- Admitted vs. non-passenger - some policies limit or exclude passenger bodily injury unless specifically endorsed.
- Medical payments - per-seat medical limits for occupants.
Worked Example - Split Limits (Aviation Liability)
A charter policy shows liability limits of $1,000,000 per passenger / $5,000,000 per occurrence / $2,000,000 property damage. An accident injures 6 passengers with damages of $1,200,000 each plus $400,000 in ground property damage.
- Each passenger capped at $1,000,000 -> 6 x $1,000,000 = $6,000,000 indicated, but...
- The per-occurrence cap is $5,000,000, so total bodily injury paid = $5,000,000.
- Property damage $400,000 is within the $2,000,000 PD limit -> paid in full.
- Total insurer payout = $5,400,000; the insured retains the excess bodily-injury exposure.
Other Specialty Lines
- Professional liability / E&O - covers economic loss from a professional's negligent act, error, or omission (vs. CGL's bodily injury/property damage). Malpractice is the medical version.
- D&O (Directors & Officers) - protects corporate directors and officers against "wrongful act" claims tied to management decisions.
- EPLI (Employment Practices Liability) - covers wrongful termination, discrimination, and harassment claims.
- Inland marine / floaters - mobile or specialized property (contractors' equipment, fine arts, jewelers' block, EDP).
- Difference in Conditions (DIC) - broad standalone policy filling gaps and adding flood/earthquake above a basic property program.
- Umbrella/excess liability - sits above underlying CGL, auto, and employers' liability limits, often providing broader "drop-down" coverage subject to a self-insured retention (SIR) for losses the underlying policies do not cover.
Specialty-Lines Traps
- Non-admitted = no guaranty fund. If a surplus lines insurer becomes insolvent, the state guaranty association does NOT backstop the claim.
- Cyber is not in standard forms - electronic data exclusions in CGL/property force a standalone policy.
- Claims-made coverage gaps appear if the retro date is lost or no tail is purchased on cancellation.
- Aviation passenger liability may be sublimited or excluded unless endorsed - read the declarations.
- D&O, E&O, and EPLI are distinct - do not blend management liability, professional negligence, and employment claims.
A small business buys coverage from a non-admitted surplus lines insurer that later becomes insolvent. What is the policyholder's recourse to the state guaranty fund?
Surplus Lines Mechanics and First- vs. Third-Party Cyber
Surplus (excess) lines insurers are non-admitted — not licensed in the state and not backed by the guaranty fund — and may write risks that admitted carriers decline, but only after a diligent search documents that admitted markets refused the risk, placed through a licensed surplus lines broker who collects the surplus lines tax. Cyber coverage splits into first-party (the insured's own costs: breach response, notification, business interruption, cyber extortion) and third-party (liability to customers/regulators for a data breach).
The exam tests that a surplus-lines insured forgoes guaranty-fund protection and that cyber is usually claims-made, contrasting with occurrence-based property/casualty.
Aviation Hull/Liability and the Specialty Map
Aviation insurance parallels auto: hull covers physical damage to the aircraft (in-flight, taxiing, or not-in-motion), and aviation liability covers bodily injury and property damage, often as split limits (per-passenger / per-occurrence BI and PD). Other specialty lines the exam touches include boiler and machinery (equipment breakdown), difference-in-conditions (DIC) filling gaps in primary property, kidnap and ransom, and environmental/pollution liability.
The unifying exam skill is recognizing that these niche exposures are excluded from standard CGL/property forms and require a dedicated specialty or surplus-lines policy.