Laserfiche WebLink
5 <br />which you become legally obliged to pay your acquiring bank or payment processor as a direct <br />result of a payment card breach first discovered by you during the period of the policy. <br />We will also pay costs and expenses on your behalf. <br />INSURING CLAUSE 3: CYBER INCIDENT RESPONSE <br />SECTION A: INCIDENT RESPONSE COSTS <br />We agree to pay on your behalf any reasonable sums necessarily incurred by you, or on your <br />behalf, as a direct result of a cyber event first discovered by you during the period of the policy to: <br />a.gain access to our 24/7 cyber incident response hotline; <br />b.engage with our cyber incident manager who will coordinate the initial response; <br />c.obtain initial advice and consultancy from our cyber incident manager, including threat <br />intelligence in relation to the cyber event; and <br />d.obtain initial remote support and assistance from our cyber incident manager to respond <br />to the cyber event. <br />SECTION B: LEGAL AND REGULATORY COSTS <br />We agree to pay on your behalf any reasonable sums necessarily incurred by you, or on your <br />behalf, as a direct result of a cyber event first discovered by you during the period of the policy to: <br />a.obtain initial legal advice to determine your privacy breach notification obligations; <br />b.draft notification letters, substitute notices, website notices or e-mail notification <br />templates; and <br />c.notify any appropriate government, regulatory, law enforcement, professional or statutory <br />body. <br />SECTION C: IT SECURITY AND FORENSIC COSTS <br />We agree to pay on your behalf any reasonable sums necessarily incurred by you, or on your <br />behalf, as a direct result of a cyber event first discovered by you during the period of the policy to: <br />a.engage with an external IT security consultant to identify the source and scope of the <br />cyber event; <br />b.obtain initial advice to remediate the impact of the cyber event; <br />c.conduct a forensic investigation of your computer systems where reasonable and <br />necessary or as required by law or a regulatory body (including a requirement for a PCI <br />Forensic Investigator); <br />d.contain and remove any malware discovered on your computer systems; and <br />e.engage with an IT security consultant to provide expert witness testimony at any trial or <br />hearing arising from the cyber event. <br />SECTION D: CRISIS COMMUNICATION COSTS <br />We agree to pay on your behalf any reasonable sums necessarily incurred by you, or on your <br />behalf, as a direct result of a cyber event first discovered by you during the period of the policy to: <br />CFC Underwriting Limited is Authorized and Regulated by the Financial Conduct Authority <br />Technology v4.1 <br />©1999-2024 CFC Underwriting Ltd, All Rights Reserved <br /> <br />