A policy that covers financial losses caused by cyber incidents – such as data breaches or ransomware. Requires controls like MFA, backups, and a response plan.
