Lloyd's of London Cyber Insurance Requirements and Underwriting Standards
State-backed cyber-attack exclusions in standalone cyber business (Y5381, Y5433) – Lloyd's of London Cyber Insurance Requirements and Underwriting Standards

Lloyd's of London Cyber Insurance Requirements and Underwriting Standards B7: Restrict and then end Type 4 clauses; write war cyber cover only as a distinct affirmative product

What does B7 require?

Type 4 clauses, which comply with Y5381 but also cover state-backed cyber-attacks forming part of a conventional war, sit outside Lloyd's standard risk appetite. For insurance policies incepting from 1 April 2024 (treaty reinsurance from 1 July 2024) only syndicates assessed by Lloyd's as having Advanced capability may use them, on renewal business only and subject to caps on the overall aggregate limit (renewing limit, without prior approval). From 1 January 2025 Type 4 clauses are not permitted on new or renewal business for any Lloyd's syndicate; a syndicate wishing to cover cyber-attacks carried out as part of a conventional war must do so through a clear and distinct coverage grant, for example a separate affirmative product. The Risk Code Guidance of July 2026 introduces the risk code WY for such affirmative cyber war cover from the 2027 year of account and states that WY will not be approved as a route to using Type 4, 6 or 7 clauses.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in State-backed cyber-attack exclusions in standalone cyber business (Y5381, Y5433) – Lloyd's of London Cyber Insurance Requirements and Underwriting Standards

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.