Connect coverage, controls, response, and recovery
A business can be disrupted even when its own network is not attacked. Cloud platforms, property-management systems, point-of-sale providers, payroll, logistics, reservations, manufacturing software, and managed service providers can concentrate dependency. Contracts, redundancy, response coordination, contingent business interruption, and dependent-system wording deserve specific review.
Risks to review
- Cloud, software, payment, telecommunications, or service-provider outage
- Vendor compromise spreading to customers or connected systems
- Loss of access to hosted data, applications, or credentials
- Contractual limits and recovery assumptions that do not match the exposure
Information to prepare
- Critical vendor inventory, services, data access, and system connections
- Contracts, service levels, indemnification, notification, and audit rights
- Alternative processes, redundancy, backups, and tested recovery options
- Revenue and operational impact by vendor and outage duration
Frequently asked questions
Can cyber insurance address a vendor outage?
Some policies include dependent or contingent business interruption, but covered vendors, causes, waiting periods, sublimits, and outage requirements vary.
Does a strong vendor contract eliminate cyber risk?
No. Contracts can allocate responsibility, but they do not guarantee performance, recovery, collectability, or complete reimbursement after an incident.
Coverage descriptions are general. Availability, eligibility, limits, waiting periods, deductibles, exclusions, sublimits, services, and policy terms vary. Actual policy documents control.