1. Forms
2. CY
3. CY-00-13

What the form is

The CY 00 13, titled "Media And Information Security Protection Cyber Policy", was an Insurance Services Office (ISO) claims-made coverage form. Its primary purpose was to provide specialized insurance coverage for businesses against liabilities arising from their media activities (like publishing content) and from information security breaches. This form was officially withdrawn, and its coverages were consolidated into the newer ISO form CY 00 03 11 21 (Information Security Protection Cyber Policy) around November 2021. This consolidation was part of a broader ISO initiative to update and streamline its commercial cyber product line, making the coverages more comprehensive and easier to understand.

Classes of business it applies to

Prior to its withdrawal, the CY 00 13 was particularly relevant for businesses with significant media-related exposures and those handling sensitive information. Examples include:

• Media Companies: Publishers (online and print), broadcasters, and content creators who faced risks like defamation, copyright infringement, or invasion of privacy related to their published content.
• Businesses with Significant Online Presence: Companies that managed active websites with substantial content, engaged in online advertising, or operated social media channels. For instance, an e-commerce business that also published extensive product reviews and articles.
• Organizations Handling Data: While also focused on media, the 'Information Security Protection' aspect meant it was suitable for entities concerned about data breaches, though more comprehensive cyber forms might also have been considered.

Special considerations

• Claims-Made Basis: This was a claims-made policy, meaning it covered claims first made against the insured during the policy period or an applicable extended reporting period, regardless of when the wrongful act occurred (subject to any retroactive date).
• Withdrawn Status: This form is no longer available for new policies. Insurance professionals should be aware that its provisions have been subsumed into CY 00 03 11 21. Renewals of policies originally on CY 00 13 would have transitioned to the new form structure. As of September 2022, one source indicated the 01 18 edition was withdrawn in all states except CA, FL, and VI, though the overarching status is withdrawn and superseded.
• Incorporation into CY 00 03: The coverages previously offered under CY 00 13, particularly media liability, were integrated into the Information Security Protection Cyber Policy (CY 00 03 11 21). For example, the Web Site Publishing Liability Insuring Agreement from older forms was broadened and became part of the Media Liability Insuring Agreement in the newer forms.

Key information for agents and underwriters

• Historical Context: Understanding CY 00 13 is important for reviewing historical coverage or managing claims that may fall under old policy terms.
• Transition to New Forms: Agents needed to guide clients through the transition from CY 00 13 to CY 00 03 11 21, explaining any changes in terms, conditions, and scope of coverage.
• Risk Assessment Focus (Historically): For CY 00 13, underwriters would have assessed risks related to the insured's content creation and dissemination processes, intellectual property clearance procedures, and advertising practices. Information security protocols were also a key underwriting consideration.
• Current Cyber Landscape: With the integration into CY 00 03, the focus shifts to the broader cyber risk landscape covered by the newer, more comprehensive ISO forms. Underwriters now assess a wider range of cyber threats under a single policy structure. The successor form CY 00 03 11 21 has specific claim reporting requirements, such as reporting cyber incidents as soon as practicable but no later than sixty days after the end of the policy period or extended discovery period.