Map permissions and approval steps
Record which accounts you access and who approves payments, publication or sensitive changes. Separate individual logins and use the client’s approved security process. Ask how social engineering, fraudulent instructions and client-data allegations are treated; cyber products do not all address the same events.
How are fraudulent instructions and third-party account access addressed?
Prepare an incident contact list
Know who to contact at the client and the insurer when access is compromised. Preserve relevant messages and activity records without circulating confidential data unnecessarily. Ask about approved response providers and reporting duties before choosing a repair service.
What response steps require the insurer’s involvement or approval?
Make the next conversation useful
Bring the current documents and explain any changes. These details are a useful starting point:
- Service list and client contracts
- Client locations and annual revenue
- Account-access and security practices
Ask the provider to connect its answer to the actual policy or eligibility terms, including exclusions, dates and reporting conditions. Keep the confirmed answer with the offer.
Sources & further reading
General insurance principles and the jurisdiction-specific references below support further reading. Examples are illustrative; individual policy terms require provider confirmation. Content updated October 11, 2026.