Page 103 - Commercial - Underwriting Mandates & Guidelines Binder

Cyber Liability
2.2 Scope of cover
2.2.1 This section can be triggered by an incident occurring from anywhere in the world. Cover is provided on a global territory but South African jurisdiction basis.
2.2.2 Should there be any operations outside of South Africa, please refer the risk to iTOO (ryanv@ITOO.co.za) for a quote.
2.2.3 Operations in the USA and Canada are explicitly excluded.
2.3 Events covered and extensions of cover payable with the consent of the Specialist Liability Underwriter:
2.3.1 Cyber liability:
• Defence and settlement of liability claims arising from:
– Compromised information.
– A system security incident affecting systems and data as well as causing harm to third-party systems and data.
• To the extent insurable by law, fines assessed by a government regulatory body due to an information privacy breach.
2.3.2 Crisis management and notification expenses:
• public relations campaigns to limit reputational damage;
• costs for communications during the crisis, especially to keep affected parties informed;
• notifications to affected parties;
• remediation services to safeguard affected parties e.g. credit monitoring.
2.3.3 First party expenses:
• expenses for security specialists, attorneys, forensic investigators and loss adjusters to contain, manage and recover from an incident;
• costs to restore, recollect or replace data lost, stolen or corrupted due to a system security incident, or costs incurred until such point in time where it is established that data cannot be recovered or restored.
2.3.4 Loss of business income (50% of the limit):
• loss of income and increased cost of working because of a system security incident.
2.3.5 Cyber extortion:
• costs to investigate and mitigate a cyber-extortion threat. Where required, costs to comply with a cyber-extortion demand.
2.3.6 Digital media liability:
• defence and settlement of liability claims resulting from disseminated content including defamation, unintentional copyright infringement and unintentional infringement to right to privacy.
2.4
Excluded risks
Adult media
Any government department, state owned enterprise, development agencies and the likes thereof
Call center/telemarketers
Car sales with a turnover more than R25 000 000 (twenty five million rand) per annum
Casinos/gambling of any nature
Credit card aggregators/processing service providers (provide the credit card processing functionality to other companies)
Data processor/outsourcer
Commercial Underwriting Mandates and Guidelines – Binder – Version 4 2022 101