What it does
CY 20 28 is the Payment Card Industry Liability Coverage endorsement filed with ISO's 2020 cyber forms. Payment card industry liability (fines and assessments from card brands after a breach) is an insuring agreement of CY 00 03; this endorsement addresses that coverage as described in the form. CY 20 29 limits it to defense costs only, and several states (Kansas, Ohio, Colorado, Nebraska, Maine) use their own versions.
Program context
In ISO's 2020 cyber multistate program revision, Verisk introduced a new Commercial Cyber Insurance Policy form and a new Information Security Protection Cyber Policy form that replaced all prior base coverage forms of the ISO Cyber program, together with new manual rules, loss costs and rating plan. The new forms carry the 11 21 edition (CY 00 02 11 21 and CY 00 03 11 21).
Quoting and selling notes
- Ask about card volume, PCI DSS compliance level and the payment processor.
- Check whether fines and assessments or only defense costs are covered.
- Retailers and restaurants are the main buyers.
