Decoding the MSA insurance exhibit
Enterprise customers ask for Tech E&O, cyber, GL, and umbrella at specific limits, plus additional insured and waiver language.
- Tech E&O $2M–$5M is the common floor
- Cyber $2M–$5M with first- and third-party coverage
- Retro date must predate the contract
- Notice of cancellation to the customer (30 days)
Exclusions that matter
Read for these before you sign.
- Contractual liability — SLAs and liquidated damages
- Unencrypted device exclusion
- Failure to maintain security standards (the 'we lied on the app' exclusion)
- Regulatory fines where insurable
- Wrongful collection / biometric privacy (BIPA)
Cyber controls = pricing
Carriers now underwrite on controls first, revenue second.
- MFA on email, remote access, and privileged accounts
- EDR on all endpoints
- Immutable, tested backups
- Incident response plan