Meet the CIDFP: PLUS’s Newest Designation Is Built for the Realities of Cyber Insurance

Cyber insurance professionals have always had to bridge two worlds: the technical realities of how incidents actually happen, and the insurance decisions that follow. For a long time, that bridge was built on instinct, experience, and a lot of on-the-job learning. PLUS is changing that.

Introducing the Cyber Insurance Digital Forensics Professional (CIDFP) designation —a 15-session, progressive learning program built to give cyber underwriters, claims professionals, and insurance product managers the deep, practical knowledge they need to make better decisions at every stage of a cyber claim.

The CIDFP was developed in partnership with two recognized leaders in cybersecurity and digital forensics: Booz Allen Hamilton and Constangy. Subject matter experts from both organizations serve as the faculty throughout the program, bringing real-world practitioner knowledge to every session. This isn’t a curriculum built in a classroom. It’s built by the people who respond to, investigate, and litigate these incidents every day.

Why This Designation Exists

Cyber insurance is unlike almost any other line. The events that drive claims are technical, fast-moving, and often poorly understood by the people who must evaluate, price, and respond to them. Checklist-based underwriting only goes so far. Understanding why ransomware creates the losses it does, how digital forensics works, what courts expect from insurance professionals during litigation — that knowledge doesn’t come from a policy form.

The CIDFP designation is designed to fill exactly that gap. It connects how cyber incidents unfold technically to how they create claims, legal exposure, and financial loss on the insurance side. The result is a program that makes you sharper, more confident, and better equipped to handle the complexity that defines this line.

Who Should Pursue the CIDFP?

This designation is built for early- to mid-career professionals working in or adjacent to cyber, including:

• Cyber underwriters looking to move beyond control checklists and evaluate true organizational resilience
• Claims professionals who need a deeper command of digital forensics, incident response, and coverage disputes before they arise
• Insurance product managers responsible for designing coverage solutions that reflect how cyber risk is evolving
• Brokers who want to have more informed conversations with clients, insureds, and incident response partners

The curriculum is also relevant for professionals in other business lines who want to build foundational cyber knowledge as the intersection of cyber with D&O, EPL, and other lines continues to grow.

What You’ll Learn and How

The CIDFP program moves through four progressive phases, each one building on the last. You can explore the full list of all 15 sessions and their descriptions here.

Phase 1: Cyber Foundations & Incident Response Basics | You’ll start with the economic and regulatory forces that make cybersecurity matter, what constitutes a cyber incident, and how incident response functions inside an insured organization. This phase builds a shared vocabulary between technical and insurance professionals, which is the foundation everything else rests on.

Phase 2: How Cyber Incidents Actually Happen | This is where you get into the mechanics: ransomware lifecycle; business email compromise; cloud and SaaS account compromise; and data breaches and regulatory exposure. This phase explains where claims come from and why certain incidents drive severity, complexity, and coverage disputes in the ways they do.

Phase 3: Digital Forensics, Legal Interface, & Risk Modeling | Once you understand how incidents happen, you’ll learn how they’re investigated, proven, and litigated. Evidence preservation. Working with the FBI and CISA. Expert testimony. How incident data informs cyber risk modeling at a portfolio level. This phase connects technical findings to legal outcomes and financial exposure.

Phase 4: Insurance Strategy – Underwriting, Claims, & Resilience | The final sessions bring it all back to practice. Resilience-based underwriting. Assessing real preparedness versus stated controls. Claims handling realities in ransomware and breach scenarios. Coverage interpretation under pressure. By the end, you’re not just more informed, you’re more effective.

The Capstone Session: A Live Ransomware Wargame | The program concludes with something most designations don’t offer: a hands-on, end-to-end cyber claim wargame. You’ll work through a simulated ransomware incident in real time including coverage decisions, negotiation dynamics, notification obligations, board reporting, and post-incident planning. Here, theory becomes practice and that’s the kind of experience that sticks.

A Flexible Structure Built Around Your Schedule

The CIDFP is offered as an annual cohort, giving you close-knit community of peers and exclusive access to content and faculty. On-demand sessions are released every two to three weeks, with a live Q&A session held before each new set of sessions drops. That pacing gives you time to absorb what you’ve learned and to ask faculty questions before moving on so there’s no cramming, passive reading, or misunderstandings. The program also culminates in an in-person capstone experience held on March 1, the day before the 2027 Cyber Symposium, giving you the chance to apply what you’ve learned alongside peers and extend your learning into the symposium itself. Attendees also increase their ROI as they’ll receive an exclusive discount code for Cyber Symposium registration.

How the CIDFP Fits into Your PLUS Learning Journey

The CIDFP is a meaningful standalone designation, but it also connects to the broader PLUS education ecosystem. It’s a natural next step after attending Cyber University, earning the Certificate in Cyber Liability Insurance, or completing the Cyber Professional Liability Practitioner (CPLP) designation. Completing the CIDFP also earns self-reporting credits toward CPLP maintenance, so your investment compounds across your designation path.

Registration Details

Early bird pricing is available through October 16, 2026, at $1,995. Standard pricing is $2,195. Space is limited, so registering early is worth it both for the savings and to secure your spot in this year’s cohort.

The cohort officially begins the first week of November 2026, with designation enrollment and program registration closing on November 12.

The Bottom Line

The cyber landscape isn’t getting simpler. The incidents are getting more sophisticated, the legal and regulatory environment is getting more complex, and the expectations on insurance professionals are rising accordingly. The CIDFP gives you the knowledge to meet those expectations, not just to keep up, but to lead the way.

This is the designation built for the realities of cyber insurance. We’re glad to be bringing it to the PLUS community.

Learn more about the CIDFP in the PLUS Learning Center