What it does
CM 99 08 is ISO's cyber incident exclusion for the Commercial Inland Marine Coverage Part, introduced with the 08 21 multiline cyber exclusion series. It removes coverage for loss caused by a "cyber incident" as defined in the endorsement, meaning malicious or unauthorized access to or use of computer systems and similar events. An Alaska version (CM 99 10) appears in the ISO index.
Who needs it
Carriers attach it to make clear that inland marine forms are not cyber policies. It matters to insureds with electronic equipment floaters, connected contractors equipment, and data or records coverage.
Quoting and selling notes
Check renewals for this endorsement. If it is attached, losses such as ransomware disabling equipment or corrupting records are excluded, and the insured needs a standalone cyber policy. CM 99 09 is the version with exceptions for certain ensuing physical losses, generally preferable for the insured.
