Which Policy Pays After a Cyber Event?

The Risk Intelligence Report is an independent audit of your cyber, D&O, and fidelity bond policies. Where coverage holds, where it fails, how to fix it.

Joerg Proeve → Chubb, CNA, cyber MGA, engineering background in cybersecurity I don't place policies. I audit them.

Policy Interaction Map

Your cyber policy, D&O policy, and fidelity bond were written by different carriers. Nobody reads them together. The Policy Interaction Map shows you which one responds to each incident type, and where none responds.

Incident Cyber Policy Fidelity Bond D&O Policy
Ransomware Attack Covered
Wire Transfer Fraud Sublimited with conditions
Core Vendor Breach Sublimited
Data Breach – Loss to the Bank Defense costs erode limit
Data Breach – Claims Against the Board No board coverage Cyber claims excluded
Ransomware Attack
Cyber Covered
Wire Transfer Fraud
Bond Sublimited with conditions
Core Vendor Breach
Cyber Sublimited
Data Breach – Loss to the Bank
Cyber Defense costs erode limit
Data Breach – Claims Against the Board
Cyber No board coverage
D&O Cyber claims excluded

What Does a Risk Intelligence Report Include?

Forensic Risk Scorecard

One-page summary across seven risk categories. Designed for board review and examination.

Policy Interaction Map

The table above, built from your policies with dollar amounts. Shows where carriers point at each other and where the bank holds the loss.

Policy Deep Dives

Each policy tested against real incident scenarios, down to the exclusions and conditions that determine whether a claim gets paid.

Implementation Roadmap

Specific fixes ranked by exposure, with the language to request at renewal.

Some Coverage Gaps From Recent Bank Audits

The D&O Policy That Steps Back

Gap: Every D&O policy I reviewed carries a cyber exclusion. Where it reads "arising out of any cyber event," a breach that triggers a regulatory investigation or a lawsuit takes the D&O out of the picture. Narrower wording leaves some director coverage in place. Which one you have is a question nobody asks until the claim.

Impact: The board's defense falls entirely to the cyber policy. Forensics and notification are spending the same limit first, but there is no Side A tower behind them.

The Vendor Outage Nobody Sized

Gap: The dependent business interruption sublimits in the banks I recently reviewed ranged from zero to $1M. A multi-day outage of their core processor would exceed their sublimit before recovery begins.

Impact: Potentially seven figures of uninsured exposure. Nobody had tested the limit against actual vendor dependence.

Why Doesn't My Broker Do This?

Your broker compares carriers, negotiates terms, and manages renewals. Reading all three policies together and testing them against loss scenarios is a different job. I read what your broker placed and document the gaps.

How Do I Start?

1. You Send Me Your Policies

Share your cyber and D&O policies, and your fidelity bond. I handle the rest.

2. I Review Them

Line-by-line analysis against real incidents. Every policy read together.

3. You Get the Report

A written report with every finding in dollar terms, plus a 30-minute walkthrough.

4. Act on the Findings

At renewal, in the boardroom, or before your next examination.

A Claim Will Test Your Coverage

A Risk Intelligence Report tests it now. Flat fee. No hourly billing. No broker of record letter required.

Get in Touch →