PlumBot: Bot: Creating new article from JSON

2026-03-10T13:53:27Z

Bot: Creating new article from JSON

New page

🛡️ '''Social engineering coverage''' is an [[Definition:Insurance | insurance]] provision — typically structured as an [[Definition:Endorsement | endorsement]] to a [[Definition:Commercial crime insurance | commercial crime]] or [[Definition:Cyber insurance | cyber]] policy — that indemnifies an insured organization for financial losses resulting from employees being deceived into voluntarily transferring money or assets to a fraudulent party. Traditional crime policies often exclude losses where the insured's own personnel willingly initiate a transaction, even if that action was induced by impersonation or other manipulative tactics. Social engineering coverage fills that gap by explicitly addressing scenarios such as [[Definition:Business email compromise (BEC) | business email compromise]], fraudulent vendor payment instructions, and impersonation of executives or clients.

📋 Operationally, this coverage comes with conditions designed to manage [[Definition:Moral hazard | moral hazard]]. [[Definition:Underwriter | Underwriters]] commonly require that the insured maintain documented verification procedures — for instance, callback protocols using independently sourced phone numbers before processing payment changes — and may mandate periodic employee training on [[Definition:Phishing | phishing]] and fraud awareness. [[Definition:Policy limit | Sub-limits]] for social engineering are often lower than the overall crime policy limit, reflecting the high frequency and difficult-to-control nature of these losses. [[Definition:Deductible | Deductibles]] tend to be meaningful as well, ensuring that the insured retains first-dollar exposure and has a financial stake in prevention. Claims handling requires careful investigation to distinguish legitimate social engineering events from internal collusion or errors outside the policy's scope.

💡 Demand for social engineering coverage has surged as remote work, rapid payment systems, and increasingly sophisticated [[Definition:Cyberattack | cyberattack]] techniques expand the attack surface. For [[Definition:Broker | brokers]], articulating the differences between this endorsement and adjacent coverages — such as [[Definition:Funds transfer fraud | funds transfer fraud]], [[Definition:Computer fraud | computer fraud]], and broad-form [[Definition:Cyber insurance | cyber]] policies — is critical to ensuring clients have no unintended gaps. Carriers that pair the coverage with robust [[Definition:Loss control | loss prevention]] resources, including simulated phishing exercises and incident response planning, are finding it to be both a competitive differentiator and a tool for reducing overall [[Definition:Loss ratio (L/R) | loss ratios]] across their crime and cyber books.

'''Related concepts'''
{{Div col|colwidth=20em}}
* [[Definition:Social engineering]]
* [[Definition:Social engineering fraud coverage]]
* [[Definition:Commercial crime insurance]]
* [[Definition:Business email compromise (BEC)]]
* [[Definition:Cyber insurance]]
* [[Definition:Funds transfer fraud]]
{{Div col end}}

Definition:Social engineering coverage - Revision history

PlumBot: Bot: Creating new article from JSON