16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber splits into first-party (data restoration, business interruption, extortion) and third-party (privacy/network security liability, regulatory defense); most are claims-made.
- Standard CGL excludes data breaches via electronic-data and access-or-disclosure exclusions, creating the need for standalone cyber policies.
- Aircraft are excluded from CGL and Commercial Auto; aviation is monoline with hull (in-motion/not-in-motion/all-risk) and liability (passenger/public) parts.
- With split limits, the per-occurrence limit caps the total payout for one event even when per-passenger sublimits would sum higher.
- Ocean marine, inland marine (Nationwide Marine Definition), DIC, E&O, and D&O are the other tested specialty lines filling standard-form gaps.
Cyber, Aviation, and Other Specialty Lines
The National Portion closes commercial coverage with specialty lines that fall outside the standard ISO Commercial Package Policy. Expect questions distinguishing first-party vs. third-party cyber coverage, identifying why aviation is written on monoline manuscript forms, and recognizing inland/ocean marine and other niche products. The unifying theme: these exposures are either excluded or sublimited in standard forms, so a dedicated policy is required. Many specialty lines are written in the surplus lines (non-admitted) market, which the exam ties to the producer's surplus lines authority and diligent-search requirement.
Cyber Liability Insurance
Cyber policies split into two halves the exam loves to test:
| Coverage side | Protects | Examples |
|---|---|---|
| First-party | The insured's own losses | Data restoration, business interruption, cyber extortion/ransomware, notification costs, forensic investigation |
| Third-party | Liability to others | Privacy liability for a data breach, network security liability, regulatory defense and fines |
Most cyber policies are written on a claims-made basis, so the claim must be reported during the policy period (or extended reporting period) and after the retroactive date. Standard CGL excludes most data breaches via the electronic-data exclusion and the access-or-disclosure (data breach) exclusion, which is precisely why standalone cyber exists.
Aviation Insurance
Aircraft are excluded from the CGL and the Commercial Auto policy, so aviation is written as a separate monoline line, typically using manuscript or association forms rather than standard ISO forms. The two core parts:
- Hull coverage - first-party physical damage to the aircraft. Written as in-motion, not-in-motion, or all-risk (ground and flight).
- Liability coverage - bodily injury and property damage to others, often split between passenger liability and public (third-party) liability.
Aviation liability frequently uses split limits (per-passenger / per-occurrence) and smooth limits (a single combined limit).
Worked Example - Aviation Split Limits
A charter operator's policy reads $500,000 each passenger / $5,000,000 each occurrence for passenger liability. A crash injures 12 passengers; total adjudicated passenger damages are $7,200,000, with several individual claims exceeding $500,000.
- Each passenger's recovery is capped at $500,000, so the per-passenger sublimit limits 12 claims to 12 x $500,000 = $6,000,000 of otherwise-payable amounts.
- But the occurrence limit caps the total at $5,000,000 for the single crash.
- The insurer pays $5,000,000 total; amounts above the occurrence limit are the insured's exposure.
Trap: candidates multiply the per-passenger limit by passengers and forget the lower occurrence cap controls the aggregate for one event.
Marine and Other Specialty Lines
Round out the category with these tested products:
- Ocean marine - hull, cargo, freight, and protection & indemnity (P&I) for waterborne exposures; uses an express warranty doctrine stricter than land lines.
- Inland marine - covers property in transit and "floating" risks via the Nationwide Marine Definition; includes bailee, contractors' equipment, and Equipment Breakdown (boiler and machinery) style risks.
- Difference in Conditions (DIC) - fills gaps left by basic property forms, often adding flood and earthquake.
- Professional liability / E&O and Directors & Officers (D&O) - management and professional exposures excluded by the CGL.
Most of these forms are written on a claims-made trigger and rely on the Nationwide Marine Definition (for inland marine eligibility) to determine what can be insured as marine rather than under a standard property form.
Why Standard Forms Force Specialty Purchase
The recurring exam logic is to trace an exposure to the exclusion that drives buyers to a specialty product:
| Exposure | Excluded by | Specialty solution |
|---|---|---|
| Aircraft | CGL aircraft/auto exclusion | Aviation hull and liability policy |
| Watercraft over a stated length | CGL/homeowners watercraft exclusion | Ocean marine / yacht policy |
| Data breach and privacy | CGL access-or-disclosure exclusion | Cyber liability policy |
| Professional acts/advice | CGL "professional services" exclusion | E&O / professional liability |
| Wrongful management acts | CGL bodily-injury/property-damage trigger | D&O liability |
When a question describes a loss and asks which policy responds, first identify the standard-form exclusion in play; the correct answer is almost always the specialty line that was built to fill that exact gap.
Cyber Liability and Aviation Coverage in Detail
Cyber liability splits into first-party and third-party coverage, and the exam expects the distinction. First-party coverage pays the insured's own breach-response costs: forensic investigation, customer notification, credit monitoring, public relations, data restoration, cyber-extortion (ransomware) payments, and business interruption from a network outage. Third-party coverage pays the insured's liability to others whose data was exposed, including defense, settlements, and regulatory fines and penalties where insurable.
Because the harm is economic and discovery is delayed, cyber is written claims-made with a retroactive date, much like professional liability.
The CGL does not respond to most data breaches because the standard access-or-disclosure ("data breach") exclusion removes liability arising from the loss of confidential information, and electronic data is excluded from the definition of covered property. That gap is precisely why cyber liability became a stand-alone line, and an exam question describing a hacked customer database is almost always pointing to cyber, not the CGL.
Aviation insurance parallels auto in structure but is specialized because the CGL and personal auto policies exclude aircraft entirely. Hull coverage insures the aircraft itself, often split into hull "in motion" and "not in motion," and may be written on an agreed-value basis. Aircraft liability covers bodily injury and property damage to others, sometimes divided into passenger liability and non-passenger (public) liability with separate limits. Admitted (medical) and premises liability for the airport or hangar operation may be added.
Underwriting weighs the pilot's ratings, hours, and the aircraft's use (private, commercial, instructional).
Worked scenario: a retailer's point-of-sale system is breached, exposing 50,000 customer card numbers. The retailer faces $300,000 in notification and forensic costs and a class-action suit. The CGL denies the suit under the access-or-disclosure exclusion, so a cyber liability policy responds, paying the first-party response costs and defending the third-party suit subject to its claims-made terms. Tracing the breach to the CGL exclusion and then to cyber is the model specialty-line question.
Key Takeaways
Specialty lines exist to fill standard-form exclusions: aviation covers aircraft the CGL and auto exclude, and cyber liability covers data breaches the CGL's access-or-disclosure exclusion removes. Cyber is claims-made and splits into first-party response costs (forensics, notification, ransomware, business interruption) and third-party liability. Aviation mirrors auto with hull and liability coverages underwritten on pilot experience and aircraft use. Identify the triggering exclusion first, then name the specialty line built for it.
A company suffers a ransomware attack. Which cyber coverage element responds to the company's OWN cost to restore data and pay the extortion demand?
An aviation passenger-liability policy has limits of $300,000 each passenger / $3,000,000 each occurrence. One crash produces $4,500,000 of total passenger damages spread across many claimants. How much will the insurer pay for the occurrence?