Threat Intelligence

Cyber Insurers Are Moving Beyond Payouts and Into Cybersecurity Itself

Dark Reading · 23 Oct 2026
Key Takeaway Ask your insurer or broker what security measures they expect, and treat your cyber policy as a complement to your own defences rather than a replacement for them.

Cyber insurance is changing. According to Dark Reading, insurers can no longer rely on underwriting alone, which means assessing a business and pricing the policy accordingly.

The report points to three pressures driving this shift: the rise of artificial intelligence, social engineering, and cloud-related risks. As these threats grow, carriers are being pushed beyond simply transferring risk and are becoming more involved in cybersecurity itself.

For small businesses, this suggests that a cyber policy is increasingly one part of a wider security approach rather than a stand-alone safety net. The source summary does not detail what specific services or requirements insurers are introducing, so business owners should speak with their own broker or insurer about what is expected of them.

cyber insurance social engineering cloud security AI risk
Regulated in financial services? APRA CPS 220, 230 and 234, in plain language ->

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.