Incident response
IT forensic experts, crisis management and legal advice from the outset.
Cyber risk
When an attack happens, the first thing missing is not money: it is someone who knows what to do.
- Response
- 24 h
- Experts and lawyers
- Included
- Business interruption
- Covered
A ransomware attack or a data breach brings the business to a halt and opens a legal front. A cyber policy does more than pay out: it deploys a team of IT forensic experts and lawyers within hours. That response is what makes the difference between a bad day and closing down.
How exposed is your company?
Answer in thirty seconds. Nothing is sent: the result appears right here.
-
Do you store personal data of clients or employees?
-
Do you invoice or receive payments through online systems?
-
Do you make frequent bank transfers?
-
If your email or ERP goes down, does your business stop?
-
Do you have employees who work remotely?
-
Have you received any phishing attempts in the last year?
Timeline of an incident
The first 72 hours after an attack.
What the policy sets in motion from the very first call.
-
Hour 0
Call to the incident helpline
A technical team assesses the scope and provides instructions to contain the attack.
Covers involved
-
First few hours
IT forensic experts
Isolation of devices, forensic analysis and a systems recovery plan.
Covers involved
-
Day one
Specialist lawyers
Assessment of whether there has been a personal data breach and of the resulting legal obligations.
Covers involved
-
Within 72h
Notification to the authority
The GDPR requires breaches to be reported to the supervisory authority within that period where applicable.
Covers involved
-
Afterwards
Recovery and claims
Equipment, software and databases are restored, lost income is compensated while the business is at a standstill, and third-party claims arising from the exposure of their data are handled.
What the policy covers.
System and data recovery
Costs of restoring affected hardware, software and databases.
Business interruption
Income lost while your business is at a standstill because of the incident.
Third-party liability
Claims from customers or suppliers whose data has been exposed.
Notification and communication
Costs of notifying those affected and of reputation management.
Fines
Administrative fines for data protection breaches where the law allows them to be insured.
In partnership with CovertoAI
Does your business work with artificial intelligence?
The policy answers for the financial loss once it has happened. Before that there is a step: watching the automations so they do not cause it. That is CovertoAI, the AI risk prevention consultancy partnered with Coyfer, on a monthly fee with no minimum term.
- InventoryTools and automations, with a risk score.
- ResponseContainment and repair when an automation fails.
- Case fileTimeline and evidence ready for presenting the claim.
Backups are not enough.
They reduce the damage, but they do not prevent the downtime, the forensic investigation or a claim from a client whose data has been leaked.
We also review cover for impersonation fraud, which some policies include and others exclude.
Frequently asked questions.
Do we need it if we already have backups?
Backups reduce the damage but do not eliminate it. There is still the business downtime, the notification of those affected and third-party liability.
Does it cover CEO fraud or fraudulent transfers?
Some policies include this cover and others exclude it. It is one of the points we specifically check when comparing.
How long does it take for the response to be activated?
The insurers we work with have a 24-hour helpline, and their technical team gets to work the same day.
An attack gives no warning. Your cover, however, can be prepared.
A business adviser will call you during office hours.