The PAC has worked with several insurance brokers and underwriters to create a CISO-specific Professional Liability Insurance (CISO PLI) policy. The CISO PLI policy is intended to provide coverage to the CISO with a dedicated policy that addresses CISO-specific concerns related to cybersecurity and cyber regulatory matters.  

Because these policies provide coverage for claims that may be made by the CISO for actions in their role at a given organization, the policy is “tied” to their employer (or organization). This does mean that a CISO will require separate policies for different employers (see separate note about CISOs in a consulting type, or VFR – Virtual/Fractional/Retained – CISO, role).