Cyber insurance for utilities
Cyber insurance for water and wastewater systems
Lots of water districts run lean. The superintendent might be the IT department, the safety man, and the one who answers the phone at 2 a.m. That’s exactly why cyber coverage matters here.
The EPA put out a guide in 2024 for water systems on cyber insurance. A few things it points out:
- General liability usually has limited cyber coverage, and if cyber isn’t spelled out, it’s excluded.
- Ransomware may need its own coverage and should be named in the policy.
- Policies can cover breach response, data recovery, cyber extortion, lost revenue, and extra expense.
(Source: EPA 2024 guide)
Who should help with the application
The EPA suggests that for a small utility, the superintendent and your IT or OT contractor fill it out together. Bigger systems may bring in the finance director, IT lead, and counsel. (Source: EPA)
What they’ll ask about
Security controls, your control systems, water rate revenue and service area, how much customer data you hold, past claims, vendors, patching, and disaster recovery. (Source: EPA)
Ready to look at your cyber coverage?
Start with 7 quick questions, or call the office at 205-221-5466.