16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Specialty lines (cyber, aviation, K&R, pollution, terrorism, DIC) cover risks outside the standard CPP/BOP and are often placed in the surplus-lines market.
- Cyber splits into first-party (data restoration, ransomware, notification) and third-party (privacy liability); it is claims-made with a retroactive date and exists because GL/property forms exclude cyber/data.
- Aviation has hull (in-motion vs. not-in-motion) and liability parts (passenger/non-passenger BI, PD) and is largely a surplus, lightly form-regulated market.
- Split limits read per-person BI / per-occurrence BI / per-occurrence PD; each cap applies before totals - worked 100/300/50 example pays $300,000 max.
- E&S carriers are nonadmitted and not guaranty-fund protected (require diligent search); TRIA mandates an offer of terrorism coverage that the insured may reject in writing.
Cyber, Aviation, and Other Specialty Lines
The national exam closes the commercial section with specialty lines that fall outside the standard CPP/BOP - risks too unusual, too severe, or too narrow for monoline forms. Expect questions on cyber liability, aviation, excess and surplus (E&S) lines, and a cluster of niche coverages (kidnap & ransom, environmental/pollution, terrorism/TRIA). The unifying theme is that many of these risks are written by nonadmitted (surplus lines) insurers when admitted carriers will not, or cannot, cover them.
Cyber liability insurance
Cyber is the fastest-growing specialty line. Policies divide into first-party and third-party coverages:
| Coverage side | Examples |
|---|---|
| First-party | Data restoration, business interruption from a breach, cyber extortion / ransomware payments, breach-notification costs, forensic investigation |
| Third-party | Liability for failure to protect customer data, privacy/regulatory defense, media/content liability |
Key exam points: cyber is almost always written on a claims-made basis with a retroactive date; general liability and property forms now carry broad cyber/data exclusions (ISO endorsements), which is precisely why a standalone cyber policy is needed. A common trap: tangible property damage from a cyber event is generally not covered by a cyber policy - that belongs to property insurance.
Aviation insurance
Aviation is a highly specialized, often surplus-lines product. The exam wants you to recognize its two main coverage parts:
- Hull coverage = physical damage to the aircraft. Watch the distinction between "in motion" (taxiing/flight) and "not in motion" (parked/moored) - rates and even whether a loss is covered can hinge on it.
- Liability coverage = bodily injury and property damage to others, frequently split into passenger BI, non-passenger (public) BI, and property damage.
Aviation liability is commonly written with single-limit or split-limit structures and may exclude war, hijacking, and unlicensed-pilot operation. Like ocean marine, aviation is largely unregulated as to form/rate because it is an inland/surplus market - admitted-market rate filings do not control it.
Worked split-limit example (aviation/auto-style)
Split limits read as per-person BI / per-occurrence BI / per-occurrence PD, e.g., 100/300/50 = $100,000 per injured person, $300,000 total per occurrence, $50,000 property damage.
Scenario: an accident injures three people - claims of $90,000, $120,000, and $60,000 ($270,000 total) - plus $70,000 in property damage, under 100/300/50 limits.
- Person 1: $90,000 (under the $100,000 per-person cap) -> pay $90,000.
- Person 2: $120,000 capped at $100,000 per person -> pay $100,000.
- Person 3: $60,000 -> pay $60,000.
- BI subtotal = $250,000, within the $300,000 per-occurrence cap -> pay $250,000.
- Property damage $70,000 capped at the $50,000 PD limit -> pay $50,000.
- Total insurer payment = $300,000; the insured retains the uncovered $20,000 BI and $20,000 PD.
E&S, TRIA, and other specialty coverages
Excess and surplus lines cover risks admitted insurers decline. The producer must usually hold a surplus lines license, perform a diligent search of the admitted market first, and the insured signs a disclosure that the carrier is nonadmitted and not backed by the state guaranty fund.
Other tested niche lines:
- Kidnap & ransom (K&R) - reimburses ransom, crisis-response, and related expenses; policies are kept confidential.
- Environmental / pollution liability - fills the broad pollution exclusion in standard CGL forms.
- Terrorism / TRIA - the Terrorism Risk Insurance Act requires insurers to offer terrorism coverage; the insured may reject it in writing. TRIA provides a federal backstop above an industry-wide trigger, not free coverage.
- Difference in Conditions (DIC) - broadens or fills gaps (often flood/earthquake) left by an underlying property policy.
Cyber Liability
Because the CGL covers only tangible property and bodily injury, data and digital exposures require cyber insurance. Cyber policies split into first-party and third-party coverages the exam expects you to separate:
| Side | Covers |
|---|---|
| First-party | The insured's own costs: breach response/notification, forensic investigation, business interruption, cyber-extortion/ransomware, data restoration |
| Third-party | Liability to others: privacy/network-security liability, regulatory fines/defense, media liability |
Cyber is written claims-made, and a frequent exam point is that the standard CGL's "electronic data is not tangible property" wording is exactly why a separate cyber policy is needed.
Aviation Insurance
Aviation risks are excluded from the CGL and auto forms and written on specialty aviation policies with their own terms:
- Hull coverage - physical damage to the aircraft (in-flight, taxiing, or not-in-motion).
- Aircraft liability - bodily injury and property damage to others, often split between passenger and non-passenger liability.
- Underwriting hinges on pilot experience, ratings, aircraft type, and use (private, commercial, instructional).
Other Specialty Lines
The exam touches several additional specialty markets a producer should recognize: difference-in-conditions (DIC) (a broad open-peril/catastrophe policy filling gaps in a basic property program, often adding flood and earthquake); environmental/pollution liability (filling the CGL pollution exclusion); errors and omissions for technology (tech E&O); kidnap and ransom; event cancellation; and terrorism (TRIA) coverage, which insurers must offer for certified acts of terrorism.
When to Reach for a Specialty Line
The unifying exam concept is gap-filling: standard package forms deliberately exclude flood, earthquake, pollution, professional services, employment practices, data/cyber, aircraft, and watercraft so those catastrophic or specialized exposures can be rated and underwritten separately. A candidate should be able to read a fact pattern - a data breach, a chemical spill, a drone crash, a stolen database - and name the specialty line that responds rather than assuming the CGL or property form covers it.
An aviation policy carries split liability limits of 100/300/50. An accident injures three passengers with claims of $90,000, $120,000, and $60,000, plus $70,000 in property damage. What is the maximum the insurer pays?
Which statement about excess and surplus (E&S) lines and TRIA is correct?