RMACHADO GROUPINSURANCE INTERMEDIARY

Explained exercise · Reading Cyber proposals

Cyber insurance: do defence and interruption sublimits add to the overall limit?

The largest number in a Cyber proposal may attract more attention than the other lines. Yet an incident can require technical recovery, claims handling and business interruption at the same time. Read those numbers as parts of a contractual structure that needs explanation.

By RMACHADO GROUP · · 2 min read

THE ESSENTIALS

Before you start

  • Identify each unit: event, year, day or service.
  • Ask whether sublimits sit within the overall limit.
  • Compare the same scenario and durations across proposals.

Different numbers measure different things

Santander's Proteção Empresas Cyber page presents separate per-claim and annual limits, a defence sublimit and daily and duration limits for business interruption. The example illustrates different units; it represents neither every Cyber product nor a personalised proposal for your business.

Sources: Santander — Seguro Proteção Empresas Cyber, limites por sinistro, anuidade, defesa e interrupção, consultado em 28/10/2026 ↗

Create a worksheet for one incident

Our method starts with four rows: technical response, third-party claims, defence and downtime. For each, record cover, limit, period, excess and clause page. Ask which share the same overall amount and whether services and cash payments are treated alike.

Add a column for unresolved conditions. 'Assistance included' alone does not explain provider selection, accepted expenses or which limit would be used.

A fictional duration and shared-limit exercise

This teaching example is not a commercial offer: a fictional schedule sets a shared 100,000-euro incident limit. Interruption is limited to 1,000 euros per day for five days. Eight days of closure therefore give that line a theoretical ceiling of 5,000 euros, not 8,000, before the exercise's other criteria.

Now suppose amounts under the different headings, after their own limits, total 105,000 euros and all share that overall ceiling. Adding the headings does not increase the 100,000 euros. This exercise establishes neither a real payment nor the order in which an actual policy uses its limits.

Ask about the whole policy year

Complete the comparison by asking how the event and annual limits interact, how related incidents are treated and whether reinstatement of the limit is available. For a policy already used, request the relevant explanation of remaining capacity.

For an incident in progress, use the policy's response contact. Do not delay containment or applicable obligations to complete this comparison sheet; it supports preparation and reading.

Give the quote request context

Describe your activity, system dependence and estimated recovery times to RMACHADO for a Cyber quote. Selecting limits requires assessment of the business and proposal. Use aggregate information initially and avoid sharing customer data or credentials.

KEEP THESE QUESTIONS

Your checklist for the next conversation

  • Record each limit and its unit.
  • Confirm whether sublimits share an overall ceiling.
  • Check maximum duration and waiting periods.
  • Review annual aggregate, related incidents and providers.

FROM THE ARTICLE TO YOUR SITUATION

Let us discuss your situation

Tell us what you want to protect. We review your request and help compare relevant terms. Requesting a quotation does not activate insurance.

Already have a policy and need support? ↗

Sources and transparency

Content updated on .

Consultation dates are stated in individual references when available.

Numerical examples are fictional and explain concepts. Editorial interpretations are identified in the text.

Information from RMACHADO GROUP. This is not an insurance offer or individual advice. Covers, acceptance, exclusions, sums insured and costs depend on the policy. The intermediary does not underwrite the risks.