Not necessarily. A standard property or liability package may contain little cyber protection, limited extensions or explicit exclusions. Dedicated cyber cover is often used where the business wants incident-response and data-related protection.
A cyber policy may address forensic investigation, system restoration, notification support, business interruption, privacy liability, extortion response and certain forms of cybercrime. The exact scope varies greatly, especially for fraudulent payments and social-engineering losses.
Insurers will ask about controls
Multi-factor authentication, offline backups, patching, endpoint protection, staff training, payment verification and access management can affect eligibility and terms. Answers should describe the real environment, including outsourced IT and cloud services.
Watch for overlap and gaps
Crime, professional indemnity, property and cyber policies may each touch part of an event without covering the whole loss. Map likely scenarios—ransomware, invoice fraud, lost data and supplier outage—against the wording.
“Cyber included” is not enough detail. Check limits, waiting periods, exclusions, notification contacts and the incident-response service before an event occurs.