What it does
CU 34 56 was introduced with ISO's CU-2023-OFR23 filing. It excludes injury or damage arising out of a cyber incident as defined in the endorsement. ISO introduced at the same time CU 04 98, which adds back cyber incident liability coverage subject to separate occurrence and aggregate limits.
Who needs it
Applied broadly by carriers adopting ISO's cyber incident program.
How it fits the umbrella
The umbrella has its own exclusions that apply whether or not the underlying policies cover the claim, and many ISO umbrella exclusion endorsements mirror a CGL or auto exclusion so that the umbrella does not drop down where the underlying is excluded. When an underlying policy carries an exclusion, check that the umbrella carries the matching CU endorsement, or explain the gap if it does not.
Quoting and selling notes
- Explain that cyber-caused bodily injury or property damage may be excluded; review the client's cyber policy.
