16.3 Cyber, Aviation, and Other Specialty Lines

Cyber Liability Insurance

Standard CGL and property forms respond poorly to data breaches - the ISO CGL added the exclusion for access to or disclosure of confidential or personal information (the "data breach" exclusion), pushing this risk into a dedicated cyber liability market. Cyber policies are typically written on a claims-made basis and split into two halves.

• First-party coverage (the insured's own losses): breach response and forensics, notification costs, credit monitoring, business interruption from a network outage, cyber extortion / ransomware payments, and data restoration.
• Third-party coverage (liability to others): defense and damages for failing to protect data, network security liability, media/content liability, and regulatory fines and penalties where insurable.

Because coverage is claims-made, the retroactive date and the requirement to report the claim during the policy period (or an extended reporting period) control whether a breach is covered. A breach that began before the retroactive date is excluded even if discovered during the term. Sublimits commonly apply to ransomware and to regulatory defense, so the headline aggregate is rarely the true limit for those perils.

Aviation Insurance

Aviation is excluded from standard auto, CGL, and homeowners policies, so aircraft owners buy a specialized aviation policy that blends hull (property) and liability much like a business auto policy for aircraft.

The exam tests split limits vs. combined single limit. A split limit shown as 100/300/100 means $100,000 per person bodily injury, $300,000 per accident bodily injury, and $100,000 property damage. A CSL of $1,000,000 is one pool covering all BI and PD in any combination. Aviation liability also frequently uses a per-passenger seat limit (e.g., $200,000 per seat) that caps each occupant's recovery.

Other Specialty Lines and a Worked Numeric

Boiler and machinery / Equipment Breakdown (ISO): covers sudden, accidental mechanical or electrical breakdown of pressure vessels, transformers, and HVAC - a gap because property forms exclude internal mechanical breakdown. It pairs loss control inspections with coverage.

Difference in Conditions (DIC): a stand-alone policy that fills gaps left by the underlying property program, most often adding flood and earthquake that the primary form excludes.

Errors & Omissions (E&O) / Professional liability: claims-made coverage for financial harm from professional mistakes - distinct from CGL bodily-injury/property-damage exposure.

Watercraft, livestock, and event cancellation round out the specialty market.

Worked numeric - experience modification (mod): a workers' compensation mod compares a risk's actual losses to expected losses. If expected losses are $100,000 and actual losses are $70,000, the mod is roughly 0.70 (a credit) and manual premium of $50,000 becomes $50,000 x 0.70 = $35,000. Actual losses of $130,000 yield a 1.30 debit mod, raising premium to $65,000. A mod below 1.0 rewards better-than-average loss experience; above 1.0 penalizes worse experience.

Coinsurance check (specialty property): a $1,000,000 building with an 80% clause requires $800,000 of coverage. Carrying $600,000 on a $200,000 loss pays $600,000/$800,000 x $200,000 = $150,000 before deductible.

Reading a Cyber Tower and Choosing Limits

Specialty buyers stack coverage in a tower: a primary layer, then excess layers each attaching above the one below. If a $5,000,000 cyber loss hits a tower of a $2M primary, a $2M excess, and a $3M excess, the primary pays its $2M, the first excess pays its $2M, and the second excess pays the remaining $1M of its $3M limit. Sublimits inside the primary (say $1M for ransomware) can exhaust before the tower is touched.

Exam-ready specialty facts:

• Equipment breakdown can be written as a stand-alone policy or endorsed onto a commercial property/BOP form.
• DIC is typically written excess of the primary deductible and is not a substitute for the primary - it is a difference-in-conditions fill.
• E&O retroactive dates work like cyber: prior acts before the retro date are excluded even under a renewed claims-made policy.

When advising a buyer, match the limit to the worst credible loss, then confirm no perilous sublimit (ransomware, regulatory defense, social-engineering fraud) quietly caps the coverage the client actually needs.

Cyber Liability Coverage

Cyber insurance addresses data-breach and network exposures the CGL largely excludes. It splits into first-party coverage (the insured's own costs: breach notification, forensic investigation, data restoration, business interruption, cyber extortion/ransomware) and third-party liability (claims by others whose data was exposed, plus regulatory fines/defense where insurable). Most cyber policies are claims-made.

The exam point: a retailer hacked and forced to notify customers and pay a ransom looks to cyber coverage, because the CGL's definitions of bodily injury and tangible property damage generally do not reach pure data loss.

Aviation and Other Specialty Lines

Aviation insurance parallels auto/marine with its own terms: hull (physical damage to the aircraft, on the ground or in flight) and liability (passengers, third parties, and property), often written by specialty pools because of the catastrophic potential. Other specialty lines include:

Equipment breakdown is frequently tested because it covers the internal mechanical/electrical failure that property forms exclude — a boiler explosion or a chiller burnout — including the resulting damage and business income.