Why Now is the Right Time to Customize Cyber and E&O Contracts

Why Now is the Right Time to Customize Cyber and E&O Contracts
Cyber Resilience

07 of 07

This insight is part 07 of 07 in this Collection.

December 7, 2023 6 mins

Why Now is the Right Time to Customize Cyber and E&O Contracts

906499360

The non-standardized nature of cyber and E&O policy wording creates the opportunity to mold an individually tailored and responsive risk transfer tool.

Key Takeaways
  1. Cyber and E&O forms present an opportunity for policy wording variance, unlike other policies with standardized wording.
  2. With favorable market conditions when compared to recent years, now is the right time for policyholders — with the aid of their counsel — to customize their cyber and E&O coverages to suit their organization’s risk needs.
  3. Start early, form the right organizational team and include the right broker to get the process of negotiating policy wording started.

Better Informed

One of the nuances of the cyber and errors and omissions insurance market is the lack of standardized policy forms. With the lack of a standard definition, the opportunity exists for policyholders to mold cover that is tailored to their business’s exposures. This landscape empowers risk buyers to negotiate a precise and clearly worded cyber and errors & omissions (E&O) policy. Current supply and market conditions are combining to make it an ideal time for customization in the cyber and E&O market. Here’s why:

  • According to Aon’s 2023 Global Risk Management Survey, cyber attacks and data breaches continue to be the number one risk facing organizations globally. Even further, they are predicted to stay on top for the next three years, as costs of single data breaches reach all-time highs and ransomware attacks return with a vengeance.
  • According to Aon data, ransomware attacks rose 203 percent and cyber premium rates declined by 17 percent in Q3 2023, extending trends in each for a third consecutive quarter.
  • Overall buyer-friendly cyber market conditions have continued through Q3 2023, with greater competition and more capacity available.
graphic_2

The cyber and E&O market is favorable to buyers now but may become volatile over the next three to five years should loss frequency and severity continue to develop unfavorably in 2024. It is therefore especially important that buyers identify the right long-term insurer that understands their business risks and is willing to customize policy wording to address exposures and incident response strategies.

  • Systemic risk remains a top concern for insurers. Carriers continue to evaluate, scrutinize and, in some instances, restrict coverage offered for critical infrastructure, systemic or correlated events, supply chain and other critical third-party dependencies, and war.
  • Privacy-related losses are mounting and becoming more severe as well. Underwriting scrutiny related to privacy exposures and data collection, including biometric information, pixel tracking, and new privacy and consumer protection regulations is increasing.

Better Decisions

Six Steps Toward Creating a Customized Cyber and E&O Policy

Complexity in the cyber and E&O market is only furthered by the dynamic appetites of cyber insurers and the constant evolution of technology risks. This results in regular changes to insuring agreements and exclusions. The market can often be a moving target. Yet, as daunting as it may seem, the prospects of negotiating a cyber or E&O policy that’s specifically geared to a business’s exposures are good. Buyers can enhance their chances for positive negotiations by following this advice:

  • 1. Start early.

    Shaping cyber policy wording requires a collaborative discussion among key stakeholders as early as six months prior to renewal. This is critical because the team involved in evaluating exposures and loss scenarios will be large and varied.

  • 2. Form the right team.

    The far-reaching consequences and intricacies surrounding technology risk require a team of colleagues that goes beyond risk management professionals. The team should include members of the cyber security and data privacy team, legal teams responsible for managing contracting, claims management and colleagues experienced with delivering business continuity plans.

  • 3. Include experienced external partners.

    Having the right insurance professionals to assist in crafting appropriate policy language and negotiating with the insurer is important. Outside counsel may also be brought in to focus on policy drafting and interpretation.

  • 4. Measure against business and industry cyber exposures.

    Policy language should be measured against the business and industry-specific exposures and loss or claim scenarios that are most concerning to the business. Identification of these scenarios, against which the policy wording will be tested, requires consideration of both frequency and severity of potential losses. This ensures that customization of the policy aligns with the organization’s risk appetite and risk management philosophy.

  • 5. Analyze policy exclusions.

    Similarly, policy exclusions must be critically analyzed to determine whether losses and desired covered claims could be excluded. With the breadth of coverage available under cyber and E&O policies, claims and losses are typically multifaceted with both first- and third-party components.

  • 6. Manage other policy terms, including business interruption.

    Other policy terms can be concerning to a business, including how business interruption losses will be calculated and presented. The base policy form often requires losses to be proven using a methodology that could be illogical or impossible for some organizations to navigate.

-17%

Decline in cyber premium rates in Q3 2023

Source: Aon data

Consider These E&O Coverage Points

In addition to the risk transfer value of the policy, E&O cover is often key to business facilitation for professional service companies. Customer contracts regularly are revised to include E&O insurance requirements that go beyond minimum required limits and include specific policy language requirements.

Three common examples include: an additional insured status for the customer, a waiver of the insurer’s rights of subrogation, and the service provider’s insurance being primary/non-contributory to any other insurance, including the customer’s. While E&O insurance policies can accommodate these requests, the policy language should remain aligned with the organization’s risk management philosophy and balance protecting the organization against facilitating business needs. Further:

  • Ensure E&O due diligence. E&O policies require a similar level of due diligence to ensure they address the risk transfer and business goals of the organization. The definition of professional services, which serves as the gatekeeper for all E&O policy coverage, is particularly important. Insurers will often push to have this definition be as narrow and specific as possible.
  • Consider an alternative approach to defining policy services. An alternative for defining professional services involves requesting an omnibus definition. It contemplates all services contracted to be provided by the organization or any third party for which the organization is legally liable. While some insurers will be receptive to this definition, they will have heightened underwriting expectations. The policyholder should be intentional with how contractual risk management, business development, and conflict resolution are presented to the insurer. This is critical for securing the insurer’s support.

“The base policy language in many E&O insurance policies may not strike the necessary balance and should be customized appropriately. Since this is different for every organization, it’s an area where collaboration between risk management, legal and business teams, alongside the insurance broker, is critical,” says Christopher Mee, Senior Vice President, E&O/Cyber Product Team, North America.

Cyber and E&O insurance policies provide a broad array of coverage designed to address the myriad losses associated with cyber incidents and professional service risks. These policies are not one-size-fits-all. They require a high degree of customization to ensure clarity and coverage when needed most.

Aon’s Thought Leaders
  • Darin McMullen
    E&O/Cyber Product Leader, Cyber Solutions, North America
  • Christopher Mee
    Senior Vice President, E&O/Cyber Product Team, Cyber Solutions, North America
  • Pablo Constenla
    Head of Cyber Coverage and Claims, Europe, Middle East and Africa
  • Helen Chapman
    Head of Coverage and Insurable Risk – Specialty Products, Global Broking Center and UK Commercial Risk
  • Dan Screene
    Head of Cyber Coverage, Global Broking Center and UK Commercial Risk

203%

Increase in ransomware attacks in Q3 2023

Source: Aon data

General Disclaimer

The information contained herein and the statements expressed are of a general nature and are not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information and use sources we consider reliable, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.

Terms of Use

The contents herein may not be reproduced, reused, reprinted or redistributed without the expressed written consent of Aon, unless otherwise authorized by Aon. To use information contained herein, please write to our team.

Aon's Better Being Podcast

Our Better Being podcast series, hosted by Aon Chief Wellbeing Officer Rachel Fellowes, explores wellbeing strategies and resilience. This season we cover human sustainability, kindness in the workplace, how to measure wellbeing, managing grief and more.

Aon Insights Series Asia

Expert Views on Today's Risk Capital and Human Capital Issues

Aon Insights Series Pacific

Expert Views on Today's Risk Capital and Human Capital Issues

Aon Insights Series UK

Expert Views on Today's Risk Capital and Human Capital Issues

Client Trends 2025

Better Decisions Across Interconnected Risk and People Issues.

Construction and Infrastructure

The construction industry is under pressure from interconnected risks and notable macroeconomic developments. Learn how your organization can benefit from construction insurance and risk management.

Cyber Resilience

Our Cyber Resilience collection gives you access to Aon’s latest insights on the evolving landscape of cyber threats and risk mitigation measures. Reach out to our experts to discuss how to make the right decisions to strengthen your organization’s cyber resilience.

Employee Wellbeing

Our Employee Wellbeing collection gives you access to the latest insights from Aon's human capital team. You can also reach out to the team at any time for assistance with your employee wellbeing needs.

Environmental, Social and Governance Insights

Explore Aon's latest environmental social and governance (ESG) insights.

Q4 2023 Global Insurance Market Insights

Our Global Insurance Market Insights highlight insurance market trends across pricing, capacity, underwriting, limits, deductibles and coverages.

Global Risk Management Survey

Better Decisions Across Interconnected Risk and People Issues.

Regional Results

How do the top risks on business leaders’ minds differ by region and how can these risks be mitigated? Explore the regional results to learn more.

Top 10 Global Risks

Trade, technology, weather and workforce stability are the central forces in today’s risk landscape.

Industry Insights

These industry-specific articles explore the top risks, their underlying drivers and the actions leaders are taking to build resilience.

Human Capital Analytics

Our Human Capital Analytics collection gives you access to the latest insights from Aon's human capital team. Contact us to learn how Aon’s analytics capabilities helps organizations make better workforce decisions.

Human Capital Quarterly Insights Briefs

Read our collection of human capital articles that explore in depth hot topics for HR and risk professionals, including using data and analytics to measure total rewards programs, how HR and finance can better partner and the impact AI will have on the workforce.

Insights for HR

Explore our hand-picked insights for human resources professionals.

Workforce

Our Workforce Collection provides access to the latest insights from Aon’s Human Capital team on topics ranging from health and benefits, retirement and talent practices. You can reach out to our team at any time to learn how we can help address emerging workforce challenges.

Mergers and Acquisitions

Our Mergers and Acquisitions (M&A) collection gives you access to the latest insights from Aon's thought leaders to help dealmakers make better decisions. Explore our latest insights and reach out to the team at any time for assistance with transaction challenges and opportunities.

Natural Resources and Energy Transition

The challenges in adopting renewable energy are changing with technological advancements, increasing market competition and numerous financial support mechanisms. Learn how your organization can benefit from our renewables solutions. 

Navigating Volatility

How do businesses navigate their way through new forms of volatility and make decisions that protect and grow their organizations?

Parametric Insurance

Our Parametric Insurance Collection provides ways your organization can benefit from this simple, straightforward and fast-paying risk transfer solution. Reach out to learn how we can help you make better decisions to manage your catastrophe exposures and near-term volatility.

Pay Transparency and Equity

Our Pay Transparency and Equity collection gives you access to the latest insights from Aon's human capital team on topics ranging from pay equity to diversity, equity and inclusion. Contact us to learn how we can help your organization address these issues.

Property Risk Management

Forecasters are predicting an extremely active 2024 Atlantic hurricane season. Take measures to build resilience to mitigate risk for hurricane-prone properties.

Technology

Our Technology Collection provides access to the latest insights from Aon's thought leaders on navigating the evolving risks and opportunities of technology. Reach out to the team to learn how we can help you use technology to make better decisions for the future.

Trade

Our Trade Collection gives you access to the latest insights from Aon's thought leaders on navigating the evolving risks and opportunities for international business. Reach out to our team to understand how to make better decisions around macro trends and why they matter to businesses.

Transaction Solutions Global Claims Study

Better Decisions Across Interconnected Risk and People Issues.

Weather

With a changing climate, organizations in all sectors will need to protect their people and physical assets, reduce their carbon footprint, and invest in new solutions to thrive. Our Weather Collection provides you with critical insights to be prepared.

Workforce Resilience

Our Workforce Resilience collection gives you access to the latest insights from Aon's Human Capital team. You can reach out to the team at any time for questions about how we can assess gaps and help build a more resilience workforce.

More Like This

View All
  • 2026 Human Capital Outlook: 5 Forces to Act on

    Article 28 mins

    2026 Human Capital Outlook: 5 Forces to Act on

    As workforce expectations rise and business risks intensify, HR leaders must act on five forces shaping 2026 — from AI and skills to healthcare costs, analytics, pay transparency and retirement readiness. Discover how to build a strategy that balances performance, cost and experience.

  • From Compliance to Competitiveness: Sustainability for Finance Leaders

    Article 10 mins

    From Compliance to Competitiveness: Sustainability for Finance Leaders

    Sustainability is no longer reputational. It’s a strategic priority within risk and capital management, powered by robust data, innovation and industry expertise. For finance leaders, embedding sustainability into decision making can be critical to secure long-term value and earn stakeholder trust.

  • Nuclear Energy Revival: Risk, Resilience and the Talent Revolution

    Article 15 mins

    Nuclear Energy Revival: Risk, Resilience and the Talent Revolution

    Nuclear is a critical pillar of the energy transition, addressing the dual challenges of decarbonization and surging demand. Success will hinge on managing risks across new generation technologies, regulatory shifts, financial model changes, supply chain challenges — and the acute war for talent.

  • Nordic Insurance Market Insights – November 2025

    Article 14 mins

    Nordic Insurance Market Insights - 2026 Outlook

    The insurance market is softening across the Nordics; a trend expected to continue across most lines throughout 2026. A key reason for the widespread rate reductions is an abundance of capacity, with the region proving to be an attractive destination for international insurance providers.

  • Q3 2025 UK Insurance Market Outlook

    Article 12 mins

    Q3 2025 UK Insurance Market Outlook

    Buyer-friendly conditions in the UK insurance market remain and prices continue to soften across most lines. While there are opportunities to reinstate limits and broaden cover, the focus for insurance buyers on providing high quality risk information and demonstrating good risk management remains.

  • Credit Insurance and The Future of Energy

    Article 7 mins

    Credit Insurance and The Future of Energy

    In a conversation with Trade Finance Global’s (TFG) Deputy Editor, Mahika Ravi Shankar, Madeleine Whiteley, Senior Client Manager at Aon, explored how credit insurance is helping energy clients navigate volatility, adapt to the transition to renewables, and manage the uncertainties of today’s market

  • As Health Spend Soars, Employers Should Beware of Hidden Cost Threats

    Article 9 mins

    As Health Spend Soars, Employers Should Beware of Hidden Cost Threats

    While cancer care and specialty medicines are familiar culprits behind rising U.S. healthcare costs, benefit leaders should also watch out for less obvious factors driving up expenses. Taking a holistic view requires being aware of these hidden threats as you work to manage costs.

  • Risk Factors and Conditions Driving the Global Medical Trend Rate

    Article 8 mins

    Risk Factors and Conditions Driving the Global Medical Trend Rate

    The global medical trend rate is projected to dip below double digits for the first time in three years to 9.8%. It may be a hopeful sign that cost increases have plateaued, but cost increases are still elevated. We explain the risks and conditions behind the increase so employers can prepare.

  • 6 Insights to Build Risk Resilience in a Volatile Retail Market

    Article 9 mins

    6 Insights to Build Risk Resilience in a Volatile Retail Market

    Retailers in North America are navigating intense competition, shifting consumer demands and rising costs. Add to that a wave of evolving risks — from cyber to litigation — and the pressure mounts. These six insights can help retailers rethink their risk strategy.

  • Cyber Risk Is the Weak Link in Data Center Construction

    Article 8 mins

    Cyber Risk is the Weak Link in Data Center Construction

    Data center construction is booming — but cyber risk management hasn’t kept pace. As digital infrastructure becomes ever more critical, fit-for-purpose insurance solutions are essential to protect projects from costly cyber events that derail timelines and budgets.

  • Global Insurance Market Overview

    Article 23 mins

    Q3 2025: Global Insurance Market Overview

    Buyer-friendly conditions persisted in Q3, with ample capacity and intense competition driving continued price reductions and broader coverage for preferred risks, especially in property, cyber, and directors and officers.

  • Managing the Top 3 Risks in Infrastructure Projects: What You Need to Know

    Article 10 mins

    Resilient Infrastructure: 3 Risks to Watch

    Cost inflation, project complexity and tight schedules aren’t the only pressures facing infrastructure stakeholders. Emerging risks — from design and contract misalignment to tech-driven vulnerabilities — demand proactive risk management across the entire project lifecycle.

  • business-team-discussion-960645142

    Article 5 mins

    Rethinking Talent Strategy as H1B Visa Costs Rise

    As H1B visa costs surge, organizations face complex decisions in talent strategy and global workforce planning. This article explores how employers, talent, and industry must adapt holistically to remain resilient and competitive amid sweeping immigration and market changes.

  • Country-Level Findings

    Article 41 mins

    Country-Level Findings

    Explore how risk perceptions vary across countries with insights from Aon’s 2025 Global Risk Management Survey.

  • Top 10 Global Risks

    Article 1 mins

    Regional Results

    Aon’s 2025 Global Risk Management Survey explores how organizations across four regions are responding to top risks—revealing both the challenges they face and the opportunities to build resilience in a fast-changing world.

  • Logistics

    Article 11 mins

    High Stakes in High Tech: Securing the Technology Supply Chain

    As in-demand, high-value technology cargo travels through complex supply chains, any disruption can trigger costly delays and reputational damage. Leaders can manage volatility with a future-ready risk management approach backed by innovative insurance solutions and data-driven logistics.

  • 2026 Salary Increase Planning Tips

    Article 5 mins

    2026 Salary Increase Planning Tips

    Global voluntary turnover remains low, shaping cautious 2026 salary budgets and prompting a renewed focus on employee development to sustain engagement. Employers are balancing cost control with strategic investments in skills, paying high performers, pay equity and total rewards.

  • GRMS Industry Insights Hero Banner

    Article 1 mins

    Industry Insights

    Business risks impact industries in different ways. Aon’s 2025 Global Risk Management Survey reveals how organizations across nine sectors are responding to today’s most pressing threats—from geopolitical volatility and cyber risk to supply chain disruption and talent shortages.

  • Cyber and E&O: Pricing Holds, but Market Momentum is Shifting

    Article 10 mins

    Cyber and E&O: Pricing Holds, but Market Momentum is Shifting

    The global cyber and tech errors and omissions market continues to favor buyers — for now. As AI-driven threats, privacy litigation and supply chain exposures intensify, forward-thinking organizations are using this window to build resilience.

  • Business Interruption: Managing Risk in an Interconnected World

    Article 7 mins

    Business Interruption: Managing Risk in an Interconnected World

    Business interruption is the second-highest global risk in 2025 — but is expected to fall to seventh place by 2028. As interconnected threats multiply, from cyber attacks to climate events, organizations must diversify supply chains, embed geopolitical insight and regularly update continuity plans.

  • Cash Flow and Liquidity Hero Image

    Article 6 mins

    Cash Flow and Liquidity Risk: A Rising Challenge

    Cash flow and liquidity risk re-enters the top ten global risks in 2025 — and is expected to remain in tenth place by 2028. Amid an uncertain macroeconomic outlook, organizations must strengthen forecasting and unlock working capital to build financial resilience.

  • Commodity Price Risk and Material Scarcity: An Escalating and Complex Risk

    Article 7 mins

    Commodity Price Risk and Material Scarcity: An Escalating and Complex Risk

    Commodity price risk ranks sixth globally in 2025 — and is forecast to climb to fourth place by 2028. With supply chains strained by geopolitical tensions and climate disruption, organizations should consider hedging strategies, diversifying sourcing and exploring innovative risk transfer solutions.

  • Cyber Attack or Data Breach Hero Image

    Article 6 mins

    Cyber Risk: Turning Uncertainty into Opportunity

    Cyber risk tops the global risk agenda in 2025 — and is forecast to retain the number one position through to 2028. As digital threats evolve, organizations should strengthen resilience, quantify exposure and adapt their risk strategy.

  • Damage to Reputation or Brand Hero Image

    Article 5 mins

    Damage to Reputation or Brand: A Critical Risk

    Damage to reputation or brand ranks eighth globally in 2025 — but is expected to fall to nineteenth by 2028. In an era of cyber threats, ESG scrutiny and social media amplification, organizations should quantify reputational risk and embed preventive measures into enterprise strategy.

  • Geopolitical Volatility Hero Image

    Article 6 mins

    Geopolitical Volatility: Preparing for the Unpredictable

    Geopolitical volatility ranks ninth globally in 2025 — and is forecast to rise to fifth by 2028. With conflict, trade disruption and political instability on the rise, organizations must monitor global developments, regularly assess operational exposure and conduct scenario planning.

  • Increasing Competition Is Intensifying Risk for Organizations

    Article 5 mins

    Increasing Competition Is Intensifying Risk for Organizations

    Increasing competition ranks as the fifth biggest global risk in 2025 — and is projected to climb to number three by 2028. As technological disruption, talent scarcity and geopolitical shifts intensify market pressure, organizations must embrace agility, and rethink competitive strategy.

  • Navigating Regulatory and Legislative Change

    Article 8 mins

    Navigating Regulatory and Legislative Change

    Regulatory change ranks as the fourth biggest global risk in 2025 — and is expected to fall to sixth place by 2028. As policy shifts accelerate across sustainability, technology, trade and the workforce, organizations must adopt agile compliance strategies and unlock proactive risk management.

  • Supply Chain or Distribution Failure: Navigating the New Normal

    Article 9 mins

    Supply Chain or Distribution Failure: Navigating the New Normal

    Supply chain failure ranks seventh globally in 2025 — and is projected to fall to twelfth place by 2028. As weather-related disruption, geopolitical tension and cyber threats converge, organizations must balance efficiency with resilience and diversify sourcing.

  • Top 10 Global Risks

    Article 1 mins

    Top 10 Global Risks

    As risks increasingly overlap and evolve, managing them demands more than reactive strategies. This chapter explores the top-ranked risks from the survey and highlights how organizations that take a proactive, integrated approach can turn complexity into opportunity.

  • Why Economic Slowdown is an Ongoing Risk for Organizations

    Article 6 mins

    Why Economic Slowdown is an Ongoing Risk for Organizations

    Economic slowdown ranks as the number three global risk in 2025 — and is projected to rise to number two by 2028. Amid trade tensions, inflation and geopolitical instability, organizations must strengthen liquidity, enhance workforce agility and rethink capital strategies to stay resilient.

  • Client Trends 2025

    Article 11 mins

    In Conversation with Iberdrola: Navigating Megatrends

    Spanish energy multinational, Iberdrola – a leader in grids, storage and clean energy – talks with Aon about its efforts to adapt and respond to climate impacts through its shift towards renewables and building a workforce for the future.

  • 5 Bold Predictions for the Future of Total Rewards

    Article 6 mins

    5 Bold Predictions for the Future of Total Rewards

    Total rewards professionals must adapt quickly to changes in the workforce. Whether it's personalization of benefits powered by AI or a whole new language around total rewards, the near future may look very different than the status quo.

  • Rethinking Pay for Performance in the Era of Pay Transparency

    Article 10 mins