Cyber Liability Application

Claims-Made: The information requested in this Application is for a Claims-Made policy. If issued, the policy will apply only to claims first made during the policy period, or any applicable extended reporting period.

Defense Within Limits: The limit of liability available to pay losses will be reduced and may be completely exhausted by amounts paid as defense costs.

Important Instructions

This Application will only be accepted for Applicants with revenues of $50,000,000 or less and assets of $500,000,000 or less.

Under this CyberRisk Coverage, affiliates, other than Subsidiaries as defined in this coverage, are not covered unless the Insurer has agreed specifically to schedule such entities by endorsement.

General Information

Name of Applicant*

Street Address*

Entity Type (select all that apply):

Underwriting Information

1. Indicate whether the Applicant has:
   1. Up-to-date, active firewall technology*
      NoYes
   2. Up-to-date, active anti-virus software on all computers, networks, and mobile devices*
      NoYes
   3. A process in place to regularly download and install patches*
      NoYes
   4. Backup and recovery procedures in place for all important business and customer data*
      NoYes
   5. An incident response plan to respond to a network intrusion*
      NoYes
   6. A disaster recovery plan, business continuity plan, or equivalent to respond to a computer system disruption*
      NoYes
   7. Controls to ensure the content of media communications and websites are lawful*
      NoYes
   8. Procedures in place which require service providers with access to the Applicant’s systems or the Applicant’s confidential information to demonstrate adequate network security controls*
      NoYes
   9. Multi-factor authentication for remote access to email and other systems and programs that contain private or sensitive data in bulk*
      N/ANoYes
2. Is the Applicant currently compliant with Payment Card Industry Data Security Standards (PCIDSS)?*
   N/ANoYes
3. Is the Applicant HIPAA compliant?*
   N/ANoYes
4. Indicate whether the Applicant encrypts private or sensitive data:
   1. While at rest in the Applicant’s database or on the Applicant’s network*
      N/ANoYes
   2. While in transit in electronic form*
      N/ANoYes
   3. While on mobile devices*
      N/ANoYes
   4. While on employee owned devices*
      N/ANoYes
   5. While in the care, custody, and control of a third party service provider*
      N/ANoYes

Loss Information

5. In the past three years, has the Applicant:
   1. Experienced: (1) a network or computer system disruption due to an intentional attack or system failure; (2) an actual or suspected data breach; or (3) a cyber extortion demand?*
      NoYes
   2. Received any complaints, claims, or been subject to any litigation involving:
      Matters of data protection law, intellectual property rights, defamation, rights of privacy, identity theft, denial of service attacks, computer virus infections, theft of information, damage to third party networks, or access to the Applicant’s network?*
      NoYes
6. Is the Applicant, any Subsidiary, or any person proposed for this insurance aware of any circumstance that could give rise to a claim against them under this CyberRisk coverage?*
   NoYes

If the Applicant answered Yes to any part of Question 5 or Question 6, attach details of each claim, complaint, allegation, or incident, including costs, losses, or damages incurred or paid, any corrective procedures to avoid such allegations in the future, and any amounts paid as loss under any insurance policy.

Requested Insurance Terms

7. Requested Terms:
   • Aggregate Limit Requested:
     $
   • Retention Requested:
     $
   • Effective Date Requested:*
8. Does the Applicant currently purchase CyberRisk coverage?*NoYes

   If Yes, provide the following:

   • Expiring Carrier:
     
   • Expiring Limit:
     $
   • Date coverage first purchased?

Organizations Not Eligible For Coverage

Coverage will not be considered for companies involved in whole or in part with paramilitary operations, pornography, adult entertainment, escort services, prostitution, or the manufacturing, distribution, or sale of marijuana.

Notice Regarding Compensation

For information about how Travelers compensates independent agents, brokers, or other insurance producers, please visit this website: http://www.travelers.com/w3c/legal/Producer_Compensation_Disclosure.html

If you prefer, you can call the following toll-free number: 1-866-904-8348. Or you can write to us at Travelers, Agency Compensation, One Tower Square, Hartford, CT 06183.

Fraud Statements – Attention Applicants In The Following Jurisdictions

ALABAMA, ARKANSAS, DISTRICT OF COLUMBIA, MARYLAND, NEW MEXICO, AND RHODE ISLAND: Any person who knowingly (or willfully in MD) presents a false or fraudulent claim for payment of a loss or benefit or who knowingly (or willfully in MD) presents false information in an application for insurance is guilty of a crime and may be subject to fines and confinement in prison.

COLORADO: It is unlawful to knowingly provide false, incomplete, or misleading facts or information to an insurance company to defraud or attempt to defraud the company. Penalties may include imprisonment, fines, denial of insurance, and civil damages. Any insurance company or agent of an insurance company who knowingly provides false, incomplete, or misleading facts or information to a policyholder or claimant to defraud or attempt to defraud the policyholder or claimant regarding a settlement or award payable from insurance proceeds will be reported to the Colorado Division of Insurance within the Department of Regulatory Agencies.

FLORIDA: Any person who knowingly and with intent to injure, defraud, or deceive any insurer files a statement of claim or an application containing any false, incomplete, or misleading information is guilty of a felony of the third degree.

KENTUCKY, NEW JERSEY, NEW YORK, OHIO, AND PENNSYLVANIA: Any person who knowingly and with intent to defraud any insurance company or other person files an application for insurance or statement of claim containing any materially false information or conceals for the purpose of misleading, information concerning any fact material thereto commits a fraudulent insurance act, which is a crime and subjects such person to criminal and civil penalties. (In New York, the civil penalty is not to exceed five thousand dollars ($5,000) and the stated value of the claim for each such violation.)

LOUISIANA, MAINE, TENNESSEE, VIRGINIA, AND WASHINGTON: It is a crime to knowingly provide false, incomplete, or misleading information to an insurance company to defraud the company. Penalties include imprisonment, fines, and denial of insurance benefits.

OREGON: Any person who knowingly presents a false or fraudulent claim for payment of a loss or benefit or who knowingly presents false information in an application for insurance may be guilty of a crime and may be subject to fines and confinement in prison.

PUERTO RICO: Any person who knowingly and intending to defraud presents false information in an insurance application, or presents, helps, or causes the presentation of a fraudulent claim for the payment of a loss or any other benefit, or presents more than one claim for the same damage or loss, will incur a felony and, upon conviction, will be sanctioned for each violation with the penalty of a fine of not less than $5,000 and not over $10,000, or a fixed term of imprisonment for three years, or both penalties. Should aggravating circumstances be present, the penalty established may be increased to a maximum of five years; if extenuating circumstances are present, it may be reduced to a minimum of two years.

Signatures

The undersigned Authorized Representative represents that to the best of his or her knowledge and belief, and after reasonable inquiry, the statements provided in response to this Application are true and complete, and, except in NC, may be relied upon by Travelers as the basis for providing insurance. The Applicant will notify Travelers of any material changes to the information provided.*

Electronic Signature and Acceptance – Authorized Representative*

*If electronically submitting this document, electronically sign this form by checking the Electronic Signature and Acceptance box above. By doing so, the Applicant agrees that use of a key pad, mouse, or other device to check the Electronic Signature and Acceptance box constitutes acceptance and agreement as if signed in writing and has the same force and effect as a signature affixed by hand.

Authorized Representative Name and Title*

Authorized Representative Date*

Additional Information

Please list any professional designations or memberships in professional organizations for all firm members. Please provide the best email address and phone number for you.