As more and more work is done remotely, businesses have concerns and coverage questions regarding the mobile devices they provide employees and the issues those devices can raise with their systems. We often receive questions about whether mobile devices are covered under cyber insurance.
Generally, for a mobile device to be covered by a cyber policy, it must be owned by the insured’s business. Devices owned by the insured are included in the definition of computer system in Acuity’s cyber form.
Employee-owned mobile devices are not covered. However, if employees are using personal devices to access a VPN into the insured’s network, it could lead to a data breach or a computer attack against the insured’s company devices. In that case, coverage would apply to resulting damage, including to company devices.
For businesses with employees working remotely on company-owned devices, cyber hygiene is important. HSB recommends the following to improve home cybersecurity and enhance digital experiences:
Businesses need to make sure their systems and their employees’ systems are secure and won’t lead to a cyber incident. Following good cyber hygiene is an important part of cyber risk management.