What it does
BP 15 07 is the Information Security Protection Endorsement, the main cyber insurance endorsement ISO lists for the BOP. ISO filed a revised 03 27 edition in its 2026 BOP forms filing (BP-2026-OFR26), approved in several states in September 2026 with an effective date of March 1, 2027 for new and renewal policies in those filings; the 08 24 edition remains in use until then. The 2026 filing revises endorsements only; BP 00 03 stays at 08 24. It brings a cyber coverage package into the BOP so small businesses can buy data breach and cyber protection with their property and liability coverage. The BOP's cyber incident exclusion (BP 15 60) states that it does not apply to this endorsement when attached.
Companion options
- Payment Card Industry (PCI) – Provide Coverage for Defense Expenses and Fines or Penalties (BP 15 08), or defense expenses only (BP 15 09).
- Provide Coverage for Dishonest, Malicious or Fraudulent Acts Committed by Employees (BP 15 10).
Who needs it
Retailers and restaurants taking cards, medical and professional offices holding personal data, and any small business that could be hit with ransomware or a breach.
Quoting and selling notes
- Read the carrier's coverage summary for which insuring agreements, sublimits and retentions are included; endorsement-based cyber is usually lower-limit than a stand-alone policy.
- Ask about card volume and PCI compliance, backups, multi-factor authentication and prior incidents.
- For larger exposures quote a stand-alone cyber policy (ISO CY program or carrier forms).
Related forms
BP 15 08; BP 15 09; BP 15 10; BP 15 60; BP 18 03; stand-alone CY 00 03.
