CFC, a specialist insurance provider, has released a major update to its Cyber Proactive Response (CPR) policy, introducing a series of enhancements designed to reflect the evolving nature of cyber risk for modern businesses.
Key enhancements include new personal protections for senior executives, enhanced affirmative artificial intelligence (AI) coverage, and an extended indemnity period for business interruption claims.
Scott Bailey, Head of Global Cyber Underwriting at CFC, said: “Cyber attacks no longer stop at the organisation’s network. Increasingly, they target the people responsible for running the business.
“Senior executives can face unique personal exposures during high-pressure extortion and social engineering events, involving credible threats, harassment or physical security concerns affecting their families.”
Reflecting how cyber incidents manifest in the real world, this significant update introduces protections for senior executives, covering personal crime, extortion, temporary relocation for executives ad families, and trauma counselling.
While the human impact of cyber events is frequently overlooked, these enhancements recognise that cyber incidents increasingly affect not only organisations but also the individuals leading them.
Addressing rising AI adoption, CFC’s revised wording provides clarity on AI-related exposures. Additionally, CPR extends its business interruption indemnity period from 12 to 18 months, aligning with real world recovery timelines.
In addition, CPR now includes an extended indemnity period from 12 to 18-months, reflecting the reality that many business interruption losses continue long after systems have been restored.
The revised indemnity provides protection that more closely aligns with real-world business recovery timelines.
“Cyber risks continue to evolve rapidly, whether through the growing adoption of AI technologies, increasingly targeted attacks against senior executives or the longer-term consequences of business interruption events” explains Bailey.
Adding: “At CFC, we believe cyber insurance should evolve alongside those challenges. These enhancements are designed to provide greater certainty around emerging risks, stronger protection for the individuals leading organisations, and support that reflects the human impact of cyber incidents as well as the financial one.
“From affirmative AI coverage and personal protection for executives through to an extended business interruption recovery period, these changes reinforce our commitment to helping businesses not just recover from cyber events, but emerge from them more resilient than before.”
These latest updates build upon the 2025 rollout of CPR, which established a market-leading SME cyber solution by expanding coverage and embedding CFC’s award-winning proactive prevention services directly into policy wordings.