Security and privacy

Company data and intellectual property may be your business’s most valuable assets. Safeguard your company’s sensitive information with seamless strategies and integrated coverages. Zurich specialists are industry leaders in breach insurance protection and cyber risk management solutions.

Why Zurich?

Zurich’s risk engineering team is dedicated to cyber-related issues and produces predictive analytics in collaboration with our claims team and underwriters. When Zurich professionals apply these insights to your company, the wide range of cyber risk and privacy issues can be exposed.

Our strategic relationships provide breach coaching and employee training programs to our qualified customers that help build awareness to ensure compliance with local regulations.

server blue wires

Security and privacy solutions


Security and privacy protection policy

Zurich’s Security and Privacy (S&P) Protection policy provides state-of-the-art coverages, including:

Third Party coverage

  • Security and Privacy Liability coverage
  • Regulatory proceedings defense costs
  • Civil fines and penalties coverage
  • Internet media liability coverage

Privacy coverage

  • Forensic investigation expenses
  • Legal and public relations expenses
  • Notification Expenses
  • Credit monitoring costs

First Party coverage

  • Digital asset replacement expense coverage
  • Business income loss and dependent business income loss coverage
  • Cyber extortion threat and reward payments coverage

Our policy helps businesses manage the evolving risk and financial impact of data breaches with over 25 built-in coverage enhancements and international program capabilities. Enhancements include:

  • Expanded privacy breach costs to help mitigate the potential  for third-party S&P liability claims
  • Expanded definition of company’s IT network, which now includes bring-your-own devices (BYODs)
  • Extended coverage of cyber extortion to cover threats made by employees without the cooperation of an executive officer
  • New category of healthcare record remediation responds to Protected Health Information (PHI)
  • Inclusion of outsourced service providers beyond information technology
  • Only the single highest retention is applied when multiple insuring agreements are triggered

Cyber vendor resources

Cyber vendor resources

Following a breach, obtaining a technical and legal provider with the appropriate experience is important. Zurich offers its qualified customers a complimentary half-hour consultation with an experienced cyber-breach coach.

Zurich can help Zurich-qualified customers access privacy attorneys,* who can help them assess whether a computer forensics investigation is needed, or whether breach notifications are required. In addition, here is a list of preferred third-party providers* that can provide a variety of data security and privacy services:

Data Breach Coaches:

Mullen Coughlin (U.S.)

Thompson Coburn (U.S.)

Traub Lieberman (U.S.)

Goldberg Segalla (U.S.)

Norton Rose (U.S.)

Baker & Hostetler (U.S.)

Locke Lord (U.S.)

David Wright Tremaine (U.S.)

Dolden Wallace Folick (Canada)

Data Breach Response Services:

Fidelis Cybersecurity (U.S.) Available services include forensic investigation

ID Experts (U.S. and Canada) Available services include forensic Investigation, notification and call center, credit/identity monitoring/fraud remediation and public relations

CyberScout(Formerly Identity Theft 911) (U.S.) Available services include notification and call center, and credit/identity monitoring/fraud remediation

NPC- Immersion Data Breach Response (U.S. and Canada) Available services include notification and call center

Intelligent Business Concepts (IBC), Inc. (U.S.) Available services include notification and call center, and credit/identity monitoring/fraud remediation

Kroll, Inc. (U.S. and Canada) Available services include forensic investigation, notification and call center, and credit/identity monitoring/fraud remediation

Experian Data Breach Resolution (U.S. and Canada) Available services include breach notification, incident hot line for victims, and identity protection, including credit monitoring

FleishmanHillard (U.S.) Available services include public relations/communications and crisis management

Hill + Knowlton Strategies (U.S.) Available services include public relations/communications and crisis management

Padilla CRT (U.S.) Available services include public relations/communications and crisis management

Marsh Risk Consulting’s FACS (U.S.) Available services include forensic accounting

MDD (U.S.) Available services include forensic accounting

Meaden & Moore (U.S.) Available services include forensic accounting

Pre-Breach Risk Assessment Services:

Deloitte (U.S.)

Additional resources:

eRisk Hub®

eRisk Hub can be a valuable resource in preparing for a data breach. From prevention tips to response recommendations, eRisk Hub® can assist with a wide variety of cyber situations. Zurich's eRisk Hub® is available to all Zurich North America Security and Privacy customers. 

*The privacy attorneys and other third party service providers are not subsidiaries or affiliates of Zurich and use of their products and services are independent of, and not included within, any Zurich products or services. Zurich expressly disclaims any and all damages and other costs that may arise related to the use of or reliance upon the products, services, representations or warranties made by or on behalf of the third party service providers.