Chubb’s Cyber Incident Response Team is comprised of a panel of pre-approved service providers that deliver a range of incident response services to our cyber policyholders who experience a cyber incident. Chubb’s cyber policyholders can activate this panel to respond to a cyber incident 24 hours a day, 365 days a year.
However, a key tenet of Chubb’s cyber offering is flexibility, and we recognize that you may have relationships with incident response providers that are not currently members of our Cyber Incident Response Team. Chubb’s cyber policyholders also have the option of requesting the addition of non-panel incident response providers (e.g., Non-Panel Providers) as outlined below.
Policyholder Request Process
To request the addition of a non-panel incident response provider, contact your agent or broker with the name of the of your requested Non-Panel Provider, along with a brief description of the incident response service(s) to be provided (e.g., forensics, response coaching, public relations, etc.). Your agent or broker will contact Chubb and request the provider be added to your cyber policy. Importantly, these requests must be submitted to Chubb before the occurrence of any incident or claim that is or may be reported under the policy. Requests are then processed by Chubb for further consideration, based on whether the provider is a new or existing Non-Panel Provider, as described below.
New Non-Panel Providers
If your requested Non-Panel Provider has not been previously approved by Chubb, the following process will take place once Chubb receives the request from your agent or broker:
- Chubb or your agent/broker will send the Non-Panel Provider a link to complete an online questionnaire.
- Once the questionnaire has been completed, the information will be sent to Chubb to be evaluated for approval. In some cases, Chubb may contact the Non-Panel Provider with additional questions during this evaluation process.
- Once the evaluation is complete, Chubb will share the findings with your agent or broker, who will then discuss the decision directly with you. Non-Panel Providers should not contact Chubb directly regarding their approval status.
Existing Non-Panel Providers
If the Non-Panel Provider has previously been approved by Chubb, the provider will not need to complete another questionnaire, unless otherwise instructed by Chubb. Typically, your agent or broker will simply need to submit your request to your Chubb underwriter to process the change to your policy.
Program Requirements
Both Chubb’s cyber policyholders and any requested Non-Panel Providers must adhere to the following requirements when participating in this program:
- To be considered as an approved provider, Non-Panel Providers must be listed on your cyber policy before the occurrence of any incident or claim that is or may be reported under the policy.
- Non-Panel Providers must adhere to the terms of the policy and abide by any rules and rates established during the approval process.
- Occasionally Chubb may request that a Non-Panel Provider complete an additional questionnaire.
- Approval as a Non-Panel Provider is not automatic. Receipt of a Non-Panel Provider’s information by Chubb does not mean that Chubb has agreed to add the provider as an approved Non-Panel Provider on any policyholder’s cyber policy.
- Approval as a Non-Panel Provider does not mean that the provider is now a pre-approved service provider on Chubb’s Cyber Incident Response Team.
- Non-Panel Providers should not solicit Chubb to be included as a part of our Cyber Incident Response Team. Chubb will contact the Non-Panel Provider if there is an opportunity to join the Cyber Incident Response Team.
- Policyholders should consult with their agent or broker before requesting this program.