ACI Key Coverages and Enhancements

Incident Response	Business Interruption	Data Recovery & Bricking
Covers broad category of fraud protection & notification services including voluntary	Covers loss of income and extra expenses because of interruption to the insured’s or a service provider’s network	Covers costs to recover, repair, replace or recreate data and software and replace bricked hardware
Incur loss before consent for first 72 hours	Waiting Period is a qualifying trigger with dollar retention for middle market and large businesses	Data coverage is not limited to restoration from backups
	BYOD, voluntary shutdown and continuing operating costs	Bricked hardware includes broad list of computing and personal devices and data storage hardware
	Non IT service provider coverage	Betterment up to 25%
	Cloud service outage	Operational Technology coverage can be added
	Public utility outage can be added
	Forensic accounting costs
	Interim payment of undisputed loss
	180 day period of restoration

Extortion	Crime	Reputational Harm
Coverage for ransom demand and related costs to investigate and respond	Covers financial loss resulting from cyber crimes including computer fraud, social engineering, diverted receivables, theft of telecom, data transmission and utility services (cryptojacking)	Covers loss of income because of customer attrition and brand harm resulting from adverse publicity from any cyber event
Legal representation to communicate with law enforcement and comply with OFAC and other laws restricting payment of ransom	Funds transfer fraud can be added	Not limited to data breach events
Incur sublimited loss before consent for first 72 hours	Costs to investigate, reverse or correct monetary transfers	12 month Period of Restoration
Information reward reimbursement	Authentication requirement on social engineering claims can be deleted

Liability & Regulatory Actions	PCI-DSS	Tech E&O
Coverage for civil and regulatory liability because of any failure of security or failure to protect personal or third party confidential information	Coverage to respond to PCI-DSS violations	Tech E&O can be added
Broad category of protected personal information scales to meet any regulatory requirement	Triggers for actual or suspected breach	Unintentional breach of contract
Collection, use and handling violations, not limited to a data breach	Card reissuance and recertification costs	Software copyright infringement
Civil liability for BIPA and biometric information can be added	Administrative reimbursement costs that are payable by Insured

Media Liability	General Terms & Conditions
Coverage for media torts arising out of publication and communication in any form including libel, slander, defamation, emotional distress & outrage, infringement of the right of privacy or publicity, infringement of copyright and misappropriation of idea	Single highest retention if more than one coverage is triggered
	Rogue employee and imputation and severability conditions geared to preserving coverage