It looks like silent cyber has become deafening for Lloyd’s of London, which is now requiring clarity of coverage for cyber exposures in all insurance policies. In a new market bulletin, Lloyd’s said it believes it is in the best interests of customers, brokers, and syndicates alike for all policies to be clear on whether losses caused by a cyber event are covered. “Lloyd’s is mandating that all policies provide clarity regarding cyber coverage by either excluding or providing affirmative coverage,” stated the insurance exchange. “To support the market in making the necessary changes, this requirement will be implemented using a phased approach.” Under the first phase, all first-party property damage risks incepting on or after January 01, 2020 – regardless of whether written on an all-risks basis or as named perils – must contain policy language which is explicit as to whether coverage exists or is excluded as far as losses caused by cyber risks are concerned. This phase spans the following Lloyd’s classes of business: energy construction, energy offshore property, energy onshore property, nuclear, power generation, cargo, fine art, marine hull, marine war, specie, yacht, difference in conditions, property direct & facultative (either US or non-US binder or open market), engineering, livestock & bloodstock, and terrorism. “Where clarity cannot be provided because wording changes are prohibited by local legal or regulatory requirements, Lloyd’s expects managing agents to assume these policies provide affirmative coverage for the purpose of exposure management,” read the market bulletin seen by Insurance Business. “Lloyd’s recognises that it will remain a matter for the courts in the local jurisdiction to determine the extent of cover, if any, provided by the policy.” As for the second and third phases, Lloyd’s said a market working group will be established to consider how the clarity requirement can best be implemented for liability lines of business. Details will be provided in early 2020 following a period of further market consultation slated to be concluded by the end of this year.
Lloyd’s of London has issued a market bulletin announcing that all cyber insurance policies should make explicit which exposures are covered, in an effort to protect customers, brokers and syndicates from silent cyber threats. The new regulations will be phased in, with the first requirements calling on first-party property damage risk policies to contain explicit language on whether coverage for cyber risks is included or excluded. Various cargo, energy, marine, engineering, farming and terrorism lines will need to meet the requirements. In addition, Lloyds Banking Group announced today it would introduce mandatory cybersecurity training across its entire banking group by 2020.