The common objection to cyber insurance is that the business is too small to interest anyone. Automated attacks do not work that way — they scan for exposure, not for prestige.
What cyber cover responds to
Ransomware and extortion demands, data breach response costs, forensic investigation, legal and notification expenses, regulatory defence, and business interruption arising from an attack rather than from physical damage.
The costs people underestimate
The ransom is rarely the largest number. Downtime, forensic work, legal advice, customer notification and the operational disruption of rebuilding systems typically exceed it, and none of those are covered by a standard property policy.
Who should hold it
Any business that holds customer data, takes payments online, depends on systems to operate, or has contractual obligations to protect information. That now describes most businesses.
What insurers will ask
Expect questions about backups, multi-factor authentication, patching and staff training. Good answers reduce premium; honest answers protect the claim.