Cyber Physical Damage Insurance

What this coverage does

Cyber physical damage insurance responds when a cyber incident — an intrusion into an industrial control system (ICS), operational technology (OT) network, SCADA environment, or connected equipment — causes physical consequences: equipment destruction, a fire or explosion, a pressure vessel failure, a contaminated production batch, or bodily injury to a worker or third party. The trigger is the cyber event; the loss is physical. This is the gap most commercial property and general liability policies do not intend to fill, since standard forms have increasingly added cyber exclusion endorsements (following market-standard exclusionary language) that bar coverage for any loss where a cyberattack is a proximate cause, regardless of the resulting physical damage.

The result is a coverage gap sometimes called the property-CAT cyber gap: an insured with property insurance and cyber liability insurance can still be uninsured for a cyber-triggered fire or a hacked control system that causes a boiler to overpressure, because the property form excludes the cyber cause and the cyber form excludes physical damage and bodily injury.

Who needs it

Manufacturers, utilities, energy and pipeline operators, water treatment facilities, chemical processors, and any organization running OT or ICS environments connected to or reachable from IT networks are the primary buyers. Exposure has grown as OT/IT convergence gives attackers a path from a corporate network breach into equipment that was historically air-gapped, and property and casualty underwriters have responded by excluding rather than absorbing that risk into standard forms.

What it covers and excludes in practice

Covered loss typically includes property damage and resulting business interruption from a cyber-triggered event, equipment breakdown initiated by malicious manipulation of control logic, and bodily injury or third-party property damage caused by the resulting physical event. Most policies require the OT/ICS environment to be scheduled and often require a baseline security assessment or segmentation architecture as a condition of coverage. Common exclusions include losses where no physical damage occurred (a pure data or downtime loss belongs under cyber liability or contingent business interruption instead), gradual deterioration not tied to a discrete cyber event, and war or state-sponsored attack exclusions that some markets apply to catastrophic or infrastructure-scale cyber events, subject to policy terms.

What drives price and how to structure it

Underwriters focus on OT network segmentation from corporate IT, age and patch status of ICS/SCADA components, presence of monitoring and anomaly detection on the OT network, incident response planning specific to OT environments, and the catastrophic potential of the specific equipment involved (a chemical plant control system carries different severity than a warehouse conveyor system). Coordinating this coverage with existing property and cyber liability towers is essential to avoid both gaps and unintended overlap at the boundary between the policies.