Depending on the policy costs for crisis management and IT forensics, recovery, business interruption, data protection notifications, legal advice and liability claims. Scope and exclusions differ greatly; check the terms carefully.
What insurers typically want to see
Multi-factor authentication for email, remote access and administrators.
Regular, separately stored and tested backups.
Current updates and protection software on endpoints and servers.
A documented emergency plan and responsibilities.
Permission concept with separate administrator accounts.
Employee training.
What to watch
Answer questionnaires truthfully: incorrect statements can endanger cover. Clarify reporting duties in a claim, as many policies require prompt notice. Insurance does not replace security measures but complements them. This article is not insurance or legal advice.