AGENDA

Despite growing awareness of cyber risk, expanding cyber insurance adoption—particularly among small and mid-sized businesses—remains a significant challenge. This panel explores the barriers to growth, including product complexity, buyer expectations, affordability, and insurability, while examining whether the market can continue to scale without compromising underwriting discipline or long-term profitability.

Website tracking technologies, AI, and behavioral profiling are creating new privacy and litigation risks for organizations. This panel explains how tracking pixels and similar technologies collect user data, how plaintiffs' attorneys identify potential claims, the role of arbitration and class action waivers in litigation strategy, and how AI systems leverage behavioral data to build increasingly detailed user profiles.

Learn about the evolving ransomware landscape and attack vectors/methods. Come away from this session with current sector intelligence to help develop effective policy coverage strategies and tactical policyholder due-diligence requirements in order to make cost-effective, ransomware-specific cyber insurance products available to the policyholders.

Understanding current cyber claims trends can help guide the assessment of cyber risk of the potential policyholder. This session will examine claims and losses from cyber events. Claims professionals will provide examples of incidents reported and claims processed.

Artificial intelligence is rapidly transforming the cyber threat landscape, enabling more sophisticated identity attacks, phishing campaigns, and automated exploitation techniques while introducing new liability and governance challenges. This panel examines how AI is reshaping cyber risk, where current insurance policies may fall short, and what organizations can do to strengthen AI governance, identity protection, and detection capabilities in an increasingly AI-driven environment.

Organizations continue to invest heavily in cybersecurity controls, but which ones consistently reduce cyber losses—and which fall short in practice? This panel challenges conventional wisdom by examining the real-world effectiveness of controls such as MFA, EDR/XDR, backups, and security awareness training, while exploring how implementation quality, operational complexity, and evolving attacker tactics influence claims outcomes.

Cyber insurance has traditionally been viewed as a short-tail line, but emerging liability trends, delayed claims, and evolving legal exposures are challenging that assumption. This panel examines whether pricing, reserving, and growth strategies accurately reflect long-term loss development—and what a shift toward longer-tail risk could mean for insurers' profitability and capital management.

Data breach litigation continues to evolve as plaintiffs' attorneys develop new theories of harm and leverage forensic evidence to support increasingly sophisticated claims. This panel examines how breach cases are built, strategies for investigating and defending claims, and the ongoing legal debate over standing, damages, liability, and the ethics of filing lawsuits in the immediate aftermath of a cyber incident.

Despite advances in cybersecurity, many organizations continue to fall victim to preventable attacks caused by unpatched vulnerabilities, compromised credentials, and social engineering. This panel explores why fundamental security controls remain underimplemented—particularly among SMBs—and discusses how insurers, brokers, and policyholders can work together to improve resilience through stronger underwriting, education, and practical risk management.

As multimedia liability claims continue to evolve, insurers, brokers, and policyholders face growing uncertainty over where coverage begins and ends. This panel explores the distinctions between multimedia, business, and privacy risks, examines common coverage gray areas, and discusses the underwriting challenges and policy language that shape this increasingly complex exposure.

The convergence of artificial intelligence, operational technology, and connected medical devices is creating new cyber risks with direct implications for patient safety and healthcare operations. This panel explores emerging regulatory, liability, and insurance challenges as cyber events increasingly intersect with clinical care, examining how insurers are adapting to evolving exposures across cyber, medical malpractice, product liability, and D&O coverage.

As organizations accelerate AI adoption, domain and DNS infrastructure have become critical—and often overlooked—drivers of cyber risk. This panel explores how threat actors exploit weaknesses in digital identity, domains, and trust infrastructure to enable phishing, impersonation, and large-scale fraud, while examining how insurers can better assess these exposures and evaluate policyholders' security practices.

As cyber exclusions expand across traditional property policies, organizations face growing uncertainty over how cyber-related physical damage and business interruption losses will be covered. This panel examines the emerging property protection gap, compares available cyber-caused property solutions, and explores the underwriting, modeling, and claims challenges shaping this evolving area of insurance coverage.

New child safety laws and platform regulations are reshaping the risk landscape for digital platforms, introducing stricter requirements around age verification, content moderation, AI, and online interactions. This panel examines the resulting regulatory, liability, and insurance challenges, including emerging claims trends, evolving underwriting approaches, and key coverage considerations across cyber, media liability, and technology E&O.

As cyber, technology E&O, and media/professional liability risks increasingly overlap, blended insurance policies are becoming more common—but are they the right solution? This panel explores the benefits and tradeoffs of combined forms, examining shared limits, coverage allocation, and whether consolidating distinct exposures creates greater efficiency or unintended gaps in protection.

The U.S. water sector faces growing cyber threats driven by aging infrastructure, fragmented operations, and increasing reliance on interconnected operational technology. This panel examines vulnerabilities across water systems, the potential operational and environmental consequences of cyber incidents, and the underwriting, aggregation, and resilience challenges insurers face as they assess this critical infrastructure sector.

The quantum threat to encryption is no longer theoretical, as organizations face “harvest now, decrypt later” attacks, weaknesses in current cryptographic standards, and growing uncertainty around future insurance coverage. This panel examines the broader quantum risk landscape and explores how organizations, insurers, and regulators can begin preparing for the transition to NIST-aligned post-quantum security. 

Privacy liability is increasingly arising from the misuse, collection, and handling of personal data—not just data breaches. This plenary explores the evolving regulatory landscape, emerging claims trends, and the growing complexities of coverage, helping organizations and insurers better understand and manage expanding privacy risks.

Contingent business interruption (CBI) and systemic cyber events remain among the most challenging risks for insurers to model and price due to interconnected third-party dependencies, limited historical loss data, and evolving aggregation exposures. This plenary explores how carriers are refining risk models, underwriting approaches, and pricing strategies to better account for supply chain concentration, systemic events, and capital constraints.

With cybersecurity regulations constantly evolving, understanding the latest developments is key to effective compliance and risk management. This plenary session provides a comprehensive overview of the latest regulatory developments shaping the cybersecurity and data privacy landscape. Spotlighting new and pending regulations, it will examine evolving federal trends toward regulatory consolidation and highlight significant international activity, with a particular focus on the EU, UK and APAC. Participants will leave equipped to manage evolving regulatory demands across domestic and international jurisdictions.