CFC, the specialist insurance provider, pioneer in emerging risk and market leader in cyber, today announces a major update to its Cyber Proactive Response (CPR) policy, introducing a series of enhancements designed to reflect the evolving nature of cyber risk for modern businesses, including:
new personal protections for senior executives
enhanced affirmative AI coverage
extended indemnity period for business interruption claims
“Cyber attacks no longer stop at the organisation’s network. Increasingly, they target the people responsible for running the business,” said Scott Bailey, Head of Global Cyber Underwriting at CFC. “Senior executives can face unique personal exposures during high-pressure extortion and social engineering events, involving credible threats, harassment or physical security concerns affecting their families.”
Reflecting how cyber incidents manifest in the real world, this significant update introduces protections for senior executives - including cover for personal crime and extortion exposures, temporary relocation costs for executives and their families, and trauma counselling services in the aftermath of an attack. While the human impact of cyber events is frequently overlooked, these enhancements recognise that cyber incidents increasingly affect not only organisations but also the individuals leading them. They reflect CFC’s view that cyber incidents are not just technology failures, but organisational crises requiring specialist support. They also provide meaningful support during some of the most stressful moments a leadership team can face and align with growing awareness of mental health across the business community.
As organisations increasingly embed AI across their operations, businesses and brokers are seeking greater certainty around how cyber insurance responds to emerging AI-related exposures. CFC's updated wording is designed to provide clarity and confidence at a time when many organisations are evaluating the risks and opportunities presented by AI technologies.
In addition, CPR now includes an extended indemnity period from 12 to 18-months, reflecting the reality that many business interruption losses continue long after systems have been restored. The revised indemnity provides protection that more closely aligns with real-world business recovery timelines.
Cyber risks continue to evolve rapidly, whether through the growing adoption of AI technologies, increasingly targeted attacks against senior executives or the longer-term consequences of business interruption events. Scott Bailey, Head of Global Cyber Underwriting
Bailey continued..."At CFC, we believe cyber insurance should evolve alongside those challenges. These enhancements are designed to provide greater certainty around emerging risks, stronger protection for the individuals leading organisations, and support that reflects the human impact of cyber incidents as well as the financial one.
"From affirmative AI coverage and personal protection for executives through to an extended business interruption recovery period, these changes reinforce our commitment to helping businesses not just recover from cyber events, but emerge from them more resilient than before."
These latest enhancements build on CPR’s launch in 2025, which introduced broader coverage and embedded CFC’s award-winning proactive prevention services into the policy wording, creating a market leading cyber offering for SMEs.
