Who is asking for cyber insurance, and why
Owners and general contractors increasingly connect subcontractors to shared project platforms and payment portals. Lenders and developers move draws by wire. Public agencies and utilities grant system access to vendors. Each has a reason to want the other party to keep basic cybersecurity in place and be able to pay for its own incident, and a contract clause is how they ask.
The requirement usually names a minimum limit and sometimes specific coverage parts. It is a statement of what the other party wants to see, not a recommendation of what your business actually needs, which can be more.
What to check in the clause
Read the limit as written: per claim, in the aggregate, or both. Check whether the clause names coverage parts such as network security and privacy liability, breach response, business interruption or social engineering, and whether it requires the coverage to be maintained for a period after the work ends.
Some clauses ask for the other party to be named as an additional insured, which many cyber policies do not offer in the way general liability does. Others require notice of cancellation or a waiver of subrogation. Any of these can be a problem if raised only when a certificate is due.
Matching the policy to the contract
Send the clause with the quote request so carriers price the required structure the first time. If a requirement cannot be met — an additional insured endorsement a cyber carrier will not issue, for example — it is usually easier to negotiate the wording before signing than to find a policy that matches it afterward.
Keep the requirement on file for renewal. A policy that met the contract when the job started has to keep meeting it for as long as the contract says.
Showing the coverage to the other party
Cyber coverage is usually evidenced on a certificate of insurance under the 'other' coverage line, with the carrier, policy number, dates and limits. The certificate summarizes the policy; it does not change it, so the wording requested in the contract has to exist in the policy itself.
Contractors asked for cyber limits can start with our construction cyber liability insurance quote page, and other businesses with small business cyber insurance.
More on Cyber & Technology Risk
Cyber Insurance vs. General Liability: Where One Stops and the Other Starts
General liability answers for injury and property damage; cyber insurance answers for data, networks and money moved on false instructions. Here is where the line usually falls.
By David Gleason · Published August 24, 2026 · Updated October 11, 2026
Wire Fraud and Payment Diversion: Cyber Insurance, Crime Insurance, or Both?
A redirected payment is the most common cyber-related loss for many businesses, and the one most likely to fall between policies. Here is how cyber and crime forms divide it.
By David Gleason · Published August 24, 2026 · Updated October 11, 2026
Ransomware and Cyber Insurance: What a Policy May Do After an Attack
When systems are encrypted and a demand appears, a cyber policy can fund the response — but the steps in the first hours matter. Here is what to know before it happens.
By David Gleason · Published August 24, 2026 · Updated October 11, 2026
Frequently asked questions
Why are contracts starting to require cyber insurance?
Owners, general contractors, lenders and agencies increasingly share systems, portals and payments with their vendors and want each party able to pay for its own incident.
Can a cyber policy name another company as an additional insured?
Some can in limited ways, but many cyber policies do not offer additional insured status as general liability does. Check before signing a contract that requires it.
Is the contract's cyber limit the right limit for my business?
It is the minimum the other party will accept. Your own exposure — payments, records and downtime — may call for more.
How is cyber coverage shown on a certificate of insurance?
Usually under the 'other' coverage line, listing the carrier, policy number, dates and limits. The certificate summarizes the policy; it does not change it.
What should I send with a quote request when a contract requires cyber?
The contract clause itself, the project or agreement dates, and any certificate instructions, so carriers price the required structure the first time.