16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Many specialty risks are written in the non-admitted surplus lines market and are not protected by guaranty funds.
- Cyber policies split into first-party (the insured's own costs) and third-party liability, and use sublimits plus a self-insured retention.
- A peril sublimit caps recovery for that peril regardless of the larger aggregate limit; reduce by the SIR.
- Aviation insurance is hull (physical damage) plus liability, often with per-passenger and per-occurrence limits and pilot warranties.
- DIC adds flood/earthquake to broaden property coverage; equipment breakdown, ocean marine, and claims-made E&O are other specialty lines.
Cyber, Aviation, and Other Specialty Lines
Specialty lines cover exposures the standard property and liability forms exclude or under-serve. Many are written in the surplus lines (excess and surplus, E&S) market through non-admitted carriers because the risk is hard to price in the admitted market. On the exam, recall that surplus lines policies are not protected by state guaranty funds and require a diligent-search affidavit (the admitted market declined the risk) before placement.
Cyber liability has become a core specialty line. Standard CGL and property forms largely exclude data breaches (ISO endorsement CG 21 06 excludes access-or-disclosure of confidential information), so a dedicated cyber policy is needed. Cyber coverage splits into two pillars:
- First-party coverage - the insured's own costs: breach notification, forensic investigation, data restoration, business interruption, and cyber extortion/ransomware payments.
- Third-party (liability) coverage - claims by others: privacy liability, regulatory fines/defense, and media/network security liability.
Cyber Sublimits and Retention Worked Example
Cyber policies use sublimits and a self-insured retention (SIR) rather than a simple deductible. Suppose a policy has a $1,000,000 aggregate limit, a $250,000 sublimit on cyber extortion, and a $25,000 retention. A ransomware event costs $300,000 to resolve (ransom plus negotiation).
- Sublimit caps the recovery at $250,000
- Subtract the $25,000 retention: $250,000 - $25,000 = $225,000 paid
- The insured absorbs the $50,000 above the sublimit plus the $25,000 retention = $75,000 out of pocket
Candidates frequently apply the full $1,000,000 limit; the sublimit controls for the specific peril. Always reduce by the SIR, which (unlike a deductible) the insured must pay before the carrier's duty to indemnify attaches.
Aviation Insurance
Aircraft are excluded from personal auto, homeowners, and most commercial property/liability forms, so aviation insurance is a distinct specialty class. The two principal coverages:
| Coverage | What it insures |
|---|---|
| Hull insurance | Physical damage to the aircraft (analogous to auto physical damage); written in motion, not in motion, or all risk |
| Aviation liability | Bodily injury and property damage to others, including passengers |
Aviation liability is often written with a single limit or split between per-passenger and per-occurrence limits. A common configuration is a combined single limit, e.g., $1,000,000 each occurrence with a $100,000 per-passenger sublimit. So a crash injuring three passengers caps passenger recovery at 3 x $100,000 = $300,000, still within the $1,000,000 occurrence limit. Aircraft must be operated within stated purpose-of-use and pilot warranty conditions or coverage can be voided.
Other Specialty Lines
Several additional specialty lines appear as one-question items on the national exam:
- Difference in Conditions (DIC) - a separate policy that fills gaps and broadens a property program, typically adding flood and earthquake that the underlying policy excludes; it sits over, not within, the base policy.
- Boiler and machinery / Equipment Breakdown - covers sudden mechanical or electrical breakdown of pressure vessels, boilers, and equipment; pairs with property because property forms exclude internal breakdown.
- Ocean marine - hull, cargo, freight, and protection & indemnity (P&I); governed by the older doctrine of utmost good faith (uberrimae fidei).
- Professional liability (E&O) - covers economic loss from professional negligence, usually written claims-made, distinct from the occurrence basis of standard CGL.
Trap: DIC does not replace the base property policy - it supplements it, often with a high deductible to coordinate.
Inland Marine and Floater Coverage
Inland marine evolved from ocean marine to cover property that moves, is portable, or is held by a bailee - exactly the goods standard property forms handle poorly. Commercial inland marine classes appear on the Nationwide Marine Definition, which lists eligible classes such as contractors equipment, builders risk, motor truck cargo, accounts receivable, and electronic data processing (EDP).
Many inland marine forms are written all risk (open perils) on a worldwide basis and frequently at agreed value rather than ACV, eliminating the coinsurance argument at the time of loss. Personal inland marine floaters schedule high-value items - jewelry, fine art, furs, cameras - that exceed homeowners special-limits. Because floaters drop the homeowners theft sublimits, they are the standard exam answer for covering a $40,000 engagement ring beyond a homeowners $1,500 jewelry theft cap.
Claims-Made Triggers and Surplus Lines Coordination
Professional liability and many cyber forms are claims-made, meaning the claim must be both made and reported during the policy period (or extended reporting period). A retroactive date limits coverage to wrongful acts occurring on or after that date. When an insured switches carriers, an Extended Reporting Period (ERP, or tail) preserves the right to report later claims; the exam tests that occurrence forms do not need a tail because the trigger is when the injury happened.
Because specialty risks land in the surplus lines market, the producer must hold a surplus lines license, document a diligent search of admitted carriers, and disclose to the insured that the policy is non-admitted and not guaranty-fund protected. Surplus lines premiums are also subject to a state surplus lines tax remitted by the broker.
First-Party vs. Third-Party Cyber Coverage
Cyber policies split, like all liability lines, into two halves. First-party cyber pays the insured's own costs after a breach: forensic investigation, notification of affected individuals, credit monitoring, public relations, business-interruption from a network outage, cyber-extortion/ransomware payments, and data restoration.
Third-party cyber pays the insured's liability to others — defense and damages for privacy claims, regulatory fines where insurable, and failure to safeguard data. Because the CGL treats electronic data as intangible and excludes most cyber loss, a standalone cyber policy fills a gap that standard property and liability forms leave open.
Aviation Hull/Liability and Other Specialty Lines
Aviation insurance mirrors auto's structure: hull coverage is first-party physical damage to the aircraft (in-motion, not-in-motion, or in-flight), while aviation liability covers BI/PD to passengers and third parties on the ground. Aviation is highly underwritten by pilot hours, ratings, and aircraft type. Other specialty lines the exam may touch include boiler and machinery (equipment breakdown) for electrical/mechanical accidents, difference-in-conditions (DIC) filling gaps left by basic property forms (often adding flood/earthquake), and kidnap-and-ransom for executive-protection exposures.
A cyber policy has a $1,000,000 aggregate limit, a $250,000 cyber extortion sublimit, and a $25,000 retention. A ransomware loss totals $300,000. How much does the insurer pay?
Which policy is purchased primarily to add flood and earthquake coverage that an underlying property policy excludes?