Agenda

The cyber market has moved past the rate-driven cycles that defined its early years. Capacity, pricing, and appetite are now shaped by a different set of forces: AI-enabled threats, systemic and aggregation concerns, evolving regulation, and a litigation landscape that keeps producing new claim types. This session cuts through the headlines to show where the market stands heading into 2027 and where it is likely going next. Drawing on claim trends and frontline experience, we will look at what is really driving frequency and severity, how carriers are responding on underwriting and coverage, and what that means for policyholders, brokers, and counsel. Attendees will leave with a clear read on the market and practical takeaways for the year ahead.

Most coverage conversations focus on what a policy covers. This session focuses on what falls between the policies. As cyber losses increasingly cross traditional lines of coverage, gaps and overlaps can leave policyholders exposed and carriers, brokers, and counsel in disagreement over which policy responds. We will examine where cyber and crime coverages intersect and diverge, including ownership of property, third-party losses, social engineering, and client and vendor payment fraud. We will also explore broader gaps in business interruption coverage, from differing recovery and waiting period structures across carriers to the treatment of dependent business interruption, where named-vendor schedules, unnamed providers, and infrastructure exclusions for power, utility, and telecommunications failures can determine whether a vendor-driven outage is covered at all. The session will then turn to losses that do not fit neatly into any one policy. When a cyber event causes physical damage, such as a compromised refrigeration or industrial control system, cyber, property, and general liability forms can each point to the other. We will close with two emerging issues: “silent cyber” and its newer counterpart, “silent AI.” Where do these exposures sit across cyber, crime, E&O, property, and other policies, and what happens to coverage when an AI bot or agent causes the loss?

Litigation (does settlement always make sense?) and Regulatory Developments (big changes here!) When does settling a privacy claim make business sense—and when does it simply invite the next demand? As plaintiffs apply decades-old statutes and common law theories to chatbots, AI-enabled AdTech, and data correlation, businesses and insurers face difficult choices about which claims to defend and which to resolve. This session will explore how to distinguish credible exposures from nuisance demands, evaluate legal and business risk, and make deliberate defense and settlement decisions. Drawing on CIPA, AdTech, and emerging privacy litigation, panelists will examine how the gap between evolving technology and existing law creates both litigation risk and opportunities to push back. Panelists will also explore the shifting regulatory landscape with a new and increasing regulatory focus on privacy issues, especially data collection and use, and the impact this is having on regulatory exposures and on litigation strategy and exposures.

When technology outpaces insurance, we need to rethink Tech E&O. Is insurance keeping pace with the evolution of new technology? When technology fails, the impact rarely stops with one company. Explore how interconnected technology, dependent outages and contractual liability can create cascading losses across customers and partners.