-
Activate the incident response (IR) plan immediately
Every business should have a cyber IR plan. Make sure to trigger yours straight away, bringing the right people together fast and helping to streamline the process and steady those first stressful moments.
-
Notify CFC. Don’t wait for certainty
When you notify CFC via the Response app or our 24/7 phone line, we can provide support within 15 minutes. Notification is at nil deductible and doesn’t start a claim. It simply gets our incident response team involved to triage before things escalate, with no initial cost.
-
Get a policy coverage update
It's likely you’re experiencing a cyber claim for the first time, and we want you to feel supported from the outset. Your adjuster will provide a clear update on how the policy will respond – whether that involves bringing in a forensic accountant, recovering hardware or coordinating restoration work – so you know exactly what to expect as the claim progresses.
-
Have a clear idea of what to expect
In any cyber incident, those first hours can feel intense and confusing. Every incident unfolds differently, and that’s completely normal. Our claims team has handled thousands of cyber events and will give you a clear picture of how things will unfold. They know how to steady nerves, quickly home in on unique pressure points and guide with empathy, ensuring you feel reassured and cared for from the start.
-
Pause before acting
Once we’re in the loop, there’s no need to act independently. Cyber incidents can be complex, and the right action is needed to minimize impact. That’s why our incident response experts are here to support you every step of the way.
-
Stick with panel experts wherever possible
Going off‑panel is one of the quickest ways for costs to spiral. Not every vendor fits every incident, and fees can become disproportionate. Keeping us involved ensures the right help at the right price. If you wish to incur additional costs, an early dialogue with CFC is always recommended so you can understand how the policy responds ahead of time.
-
Track business interruption (BI) impact early and continuously
It can be helpful to note revenue impacts, delays, outages and extra costs as they happen. Real‑time records make BI assessments far clearer and help prevent issues later on.
-
Stay in touch through to resolution
Some incidents have a long tail, and resolving a claim can take time. Staying aligned right through to the final steps means we can give you support all the way to closure, helping to ensure everything gets wrapped up properly.
Help cyber claims run smoothly for your clients
By taking these key actions, your clients can gain clarity and confidence at a stressful moment. Early notification, steady communication and staying aligned with our team right through to the end all help keep the claim moving in the right direction. And remember, our in-house cyber claims team is here to help every step of the way.
For more on why expert claims support makes such a difference, read Why the cyber claims service is key when picking a policy.
Meet the author
As US Cyber Claims Team Leader, Sarah Bolger supports brokers and insureds through complex cyber incidents across the market. Her work focuses on navigating high‑pressure claims scenarios and helping clients respond quickly and effectively when cyber events occur.
