Cybersecurity. SEK - IES Institution.

Marsh. Education Insurance.

Document:

IES. Renewal Report. Quotation - Cyber Package Ecclesiastical. Insurance Office Plc. 01/09/20 £320.52. Renewal Premium. 2020 (incl IPT &/or VAT)
Cyber Statement of Fact and Quote Sheet. the details of the cover you requested. We have used this information to decide the premium and terms of your offer of insurance.
PD1588 EIG General Use DDI Interest Free. Direct debit application and instruction form
PD3600 ECC UK Notice to Policyholders. Important – Updates to your policy wording

Cyber Package Quotation
Your requirements for insurance cover were:You requested that a quotation be sought for cyber insurance based upon the information provided in the prerenewal meeting.
We understand that you require an insurance policy to cover your legal liability to a third party for a loss in connection with a Data Liability or Network Security Event. You also require insurance to cover incidents whether caused by yourself or a third party for remediation costs incurred that arises from a cyber business interruption event.
Recommended Quote
As a result of our market activity, we recommend the following quote which we have obtained for you:

Policy Cyber Package. Insurer Ecclesiastical Insurance Office Plc
Cover Period 01/09/2020 to 31/08/2021
Premium (inc tax) £320.52

The basis of our recommendation is:We are recommending that you place cover with Ecclesiastical Insurance Office Plc as we believe that they provide suitable cover for your identified requirements and because of their specialism and experience in writing this type of business, their financial strength and their history of sound administrative claims handling service. Please refer to the attached statement of fact and quotation for full details of the cover provided.
Cyber Package:

POLICYHOLDER International Education Systems Ltd, St John's International School Ltd, St John's School Trust (Sidmouth) Ltd, A for E Ltd t/a Grantham Prep School
INSURER Ecclesiastical Insurance Office Plc
QUOTE NUMBER 379964842
PERIOD OF INSURANCE 01/09/2020 to 31/08/2021
BUSINESS DESCRIPTION Independent Schools, Property owners and letting of facilities

Scope of Cover. Cyber/ CrimeCover. Cover for theft, fraud or dishonesty by your employees or by third parties.

EIO – CYBER INSURANCETelephone ServicesCyber Response Service - 0345 603 8381Report a new Cyber incident/claim. 24 hours a day, 7 days a weekOnline ServicesEducation Cyber Risk Guide - https://www.ecclesiastical.com/documents/cyber-risk-education-guide.pdf
A guidance document that helps protect the School from Cyber Threats.Cyber Security Guidance Notes - https://www.ecclesiastical.com/documents/cyber-security-guidance-notes.pdf
Though it is unlikely any organisation will be able to completely eliminate the risk of a cyber-attack, basic cybersecurity measures are often the most effective and can be carried out without extra IT support.

Cyber exclusion – Equipment Breakdown
DefinitionsThe following definition is added
Cyber eventmeans
(a) a failure of electronic equipment to correctly recognise process or store any date(b) a hostile malicious illegal or transgressive act committed through electronic systems including but not limited to

(i) a virus (a program code programming instruction or any set of instructions intended to damage interfere with or have a negative effect on computer programs data or operations)
(ii) hacking (unauthorised access to any computer or other electronic equipment)
(iii) a denial of service attack (any actions or instructions intended to damage interfere with or affect the availability or performance of networks network services network connectivity or telecommunication systems)

The Breakdown definition is deleted and replaced with the followingBreakdownmeans

(a) the actual breaking failure distortion or burning out of any part of the covered equipment whilst in ordinary use arising from defects in the covered equipment causing its sudden stoppage and necessitating repair or replacement before it can resume work
(b) fracturing of any part of the covered equipment by frost when such fracture renders the covered equipment inoperative

(c) the actual and complete severance of a rope but not breakage or abrasion of wires or strands even though replacement may be necessary
(d) Electronic derangement

The following Electronic derangement definition is addedElectronic derangement
means malfunction of the computer equipment or electronic circuitry controlling or operating the covered equipment that is not accompanied by visible damage and requires replacement of one or more insuredcomponents of the covered equipment in order to restore it to its normal operation
Excluding(a) the rebooting reloading or updating of software or firmware(b) the incompatibility of covered equipment with any software or equipment installed introduced or networkedwithin the previous 30 days(c) the covered equipment being of insufficient size specification or capacity(d) loss or damage caused by a cyber event
ExclusionsThe following amendments are made to the exclusionsAny exclusion relating to damage to data or damage caused by transmission or impact of any virus or damage
caused by failure of a system is deletedThe following exclusions are added
any loss or damage caused by a cyber eventany loss of or damage to data or media caused by

(a) programming error or programming limitation
(b) loss of data (other than as specifically provided for under any Reinstatement of Data and Computer Increased Costs of Working extension of cover)
(c) loss of access
(d) loss of use
(e) loss of functionality

ExtensionsAny extension of the Equipment breakdown section that provides cover for Reinstatement of Data and or Computer Increased Costs of Working is deleted and replaced with the following
Reinstatement of data and Computer Increased Costs of Working

(a) Unless otherwise excluded we will pay the costs you incur in reinstating data that is lost or damaged as a consequence of an accident to covered equipment

Providing that

(i) our liability is limited solely to the cost of reinstating data onto media
(ii) we shall not be liable for loss or damage to software

Limit £50,000 any one accident

(b) In addition we will pay costs necessarily and reasonably incurred by you for the sole purpose of avoiding or diminishing the resulting interruption or interference to your computer operations

Limit£50,000 any one accident
Please note that Ecclesiastical is offering a 0% instalment facility to you in respect of payment of this policy only as they recognise that schools may need assistance in managing cash flow during these difficult times. The set up process is very simple and should you wish to accept Ecclesiastical’s offer please let us know and we will provide you with the required mandate for completion and return to us.
Should you wish to pay the remainder of your general insurances by instalments you will be able to do so under the Close Brothers option that is available. Information on the Close Brothers option can be found in our pre-renewal pack and further on in this document. Please note that this is not a 0% instalment facility. Alternatively you may wish to pay for the rest of your policies in full.
In placing insurances for you we normally act as your agent, should you instruct us to proceed and place this insurance, Marsh Ltd has a "delegated authority" granted by the insurer which means that it acts as agent of theinsurer and has authority to accept insurance risks, issue documentation and settle claims (in accordance with agreed terms) on their behalf. We can only place your business under a delegated authority where we reasonably consider that this meets your insurance requirements. Please contact us if you would like any further details regarding this arrangement.
Please refer to your policy wording for full details of the cover provided.

Useful links:

http://www.actionfraud.police.uk/ (The National Fraud & Cyber Crime Reporting Centre. Cyber crimes committed or attempted against you can be reported here. Also contains useful information on how to protect your organisation against fraud, scam emails etc)
https://www.gov.uk/data-protection/the-data-protection-act (overview of the Data Protection Act 1998)
https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/ (Information about the General Data Protection Regulation (GDPR) affecting UK law from May 2018)
https://www.iso.org/isoiec-27001-information-security.html (Website for the International Organisation for Standardization who developed ISO/IEC 27001:2013 referenced above)
https://www.ncsc.gov.uk/guidance (Website for the National Cyber Security Centre, useful information on how to protect your organisation against common cyber threats)
http://www.riscauthority.co.uk/free-document-library/RISCAuthority-Library_detail.s28-cyber-crime-overviewand-sources-of-support.html (Website for Riscauthority – free download document regarding cyber threats)
https://www.ncsc.gov.uk/cisp (CiSP is a joint industry and government initiative set up to exchange cyber threat information in real time, in a secure, confidential and dynamic environment, increasing situational awareness and reducing the impact on UK business)

Page updated

Report abuse