Cyber-Risk Insurance Policy for EMASESA (2027–2028)

Summary

EMASESA is procuring a cyber-risk insurance policy covering losses, costs and claims arising from cyber incidents, data and information misuse, security or system failures, digital-media liability, cyber extortion, ransomware, network interruption, external service-provider failures, computer fraud and identity impersonation. The policy has an annual aggregate indemnity limit of €3 million, with specified sublimits, including €100,000 each for computer fraud and fraudulent fund transfers and for identity impersonation. The contract runs for 12 months from 1 January 2027, with one possible annual extension; the annual premium budget is €60,000 including taxes and surcharges. Coverage applies worldwide except in the United States and Canada, with unlimited retroactivity.