GETTING STARTED
Three points to consider
- Describe the activity, digital dependencies and security measures.
- Confirm how to activate assistance and report an incident.
- Clarify limits, waiting periods, exclusions and prevention obligations.
Map the systems the business depends on
Identify the activity, essential systems, external services and types of data processed. Explain how an interruption would affect customer service, sales or operations.
The insurer may ask about backups, access controls, updates and other measures. Answers must describe the actual situation and be updated after relevant changes.
Incident response and the benefits taken out
A quotation may provide specialist assistance, first-party expenses or liability towards others, with different limits. Confirm the emergency channel and whether authorisation is required before engaging external services.
Clarify waiting periods, sub-limits, exclusions and the treatment of technology providers. The word “cyber” does not mean cover for every loss associated with using the internet.
Prepare the response before it is needed
Keep emergency contacts accessible outside the main systems. Identify who can report an incident and preserve evidence. Insurance complements prevention and continuity measures; it does not remove the need for access management, updates and data recovery.
A question to clarify before deciding
Which response and recovery services are available, and how do they work alongside data liability cover?
The product examples mentioned in the frequently asked questions illustrate possible differences. They are not an offer from RMACHADO and do not show that a particular cover is included in your policy. Availability, acceptance and terms must be confirmed in the specific quotation.
What to compare in a quotation
Use these questions to clarify differences that could affect your decision.
| Comparison point | Question to clarify |
|---|---|
| Assistance | Who responds to an incident and how are they contacted? |
| Interruption | Is there a waiting period and which losses are considered? |
| Security | Which measures are conditions for acceptance and continued cover? |
Frequently asked questions
Does insurance replace backups and secure authentication?
No. Preventive measures remain necessary and may form part of the risk acceptance terms.
Is email fraud always covered?
No. Fraud, funds transfers and system incidents may be treated differently. Ask for express confirmation of the situation you want to protect against.
Does incident response include only IT support?
Some products include forensic specialists, legal support and communications. Confirm the services and how they are activated.
Are data recovery and third-party claims the same cover?
They are different needs. Compare recovery of your own data with liability for customers’ or employees’ data.
Does the business’s usual liability policy replace cyber insurance?
AIG’s information identifies cyber exposures not covered by conventional liability policies. Compare the specific scopes.
THE NEXT STEP
A review starts with your details.
Prepare the request, check the summary and submit it when correct. A record is created only after final submission; the request does not activate insurance.
Prepare a quotation request ↗Further information
Consult institutional sources and reference documents. Insurer pages illustrate specific products; their terms are not necessarily included in any quotation presented by RMACHADO GROUP. Some linked sources are in Portuguese.
General information from RMACHADO GROUP. Examples are illustrative and do not guarantee cover, price or outcome. Terms, acceptance and cover depend on the quotation and policy. The intermediary does not underwrite the risks.