Cyber Insurance Selling Through the Broker Channel — 60-Min Training
Direct Answer
Cyber Insurance Selling Through the Broker Channel is a 60-minute training for cyber-carrier underwriters, MGA wholesale producers, and direct-writer commercial-lines reps running $25K–$1.8M premium cycles against incumbents like Chubb, AIG, AXA XL, Beazley, Coalition, At-Bay, Resilience, CFC Underwriting, Tokio Marine HCC, Cowbell Cyber, Corvus Insurance (now part of The Travelers), and Zurich Cyber Insurance.
The session teaches sellers to qualify against the three-buyer reality (Retail Broker, Customer CFO, Customer CISO), run a structured discovery on risk-engineering and loss-ratio economics, present sub-limit options against ransomware-readiness criteria, and trap-set the multi-year program renewal.
Built on the MEDDPICC qualification model, Aon's risk-engineering playbook, and Marsh McLennan's 2026 cyber market index as the operating reference.
Section 1 — Why Cyber-Insurance Selling Is Different (5 min)
Open the room by killing the standard P&C-seller default. Cyber insurance is not classic property-and-casualty underwriting. Frequency and severity move together with attacker capacity, so the underwriting model recalibrates every 90 days, not annually.
Set the frame on the whiteboard.
- Three buyers, three priorities. The retail broker shops the carrier; the customer CFO funds the premium; the customer CISO defends the risk-engineering controls. Marsh McLennan's 2026 broker survey shows 68% of cyber-policy placements decided by the broker's preferred-vendor list.
- Risk engineering is the underwriting flywheel. Coalition, At-Bay, and Resilience all run pre-bind risk-engineering assessments — and policies bound off endorsed vendors show 18–24% lower loss ratios.
- Sub-limits are the operating reality. 94% of renewed policies carry at least one sub-limit on extortion, business interruption, third-party, or dependent BI per Marsh's 2026 renewal data.
End the segment with Andy Paul's rule read aloud: *"Sell underwriting confidence, not policy limits."*
Section 2 — The 60-Minute Broker-Channel Discovery (15 min)
The discovery cadence the room must practice — verbatim. Pair underwriters and roleplay — one plays the retail broker, one plays the carrier rep.
- Opening (3 min): "Walk me through your last 4 quarters of cyber placements — what bound, what didn't, and why."
- Account profile baseline (10 min): "What's the typical revenue, industry mix, and limits sought for accounts you're shopping? What's the loss-history pattern?"
- Risk-engineering posture (12 min): "Which carriers' risk-engineering assessments are most credible with your customers? At-Bay's continuous-monitoring scores are widely accepted; how does your roster handle them?"
- Sub-limit appetite (10 min): "What sub-limit structures has your book accepted — extortion at 25–40% of headline, BI at 50%, third-party at 50%? Where are the negotiation friction points?"
- Vendor-endorsement posture (8 min): "Do you steer customers to vetted vendor lists? Coalition and At-Bay publish their vetted lists; how do you use them in placement?"
- Loss-history transparency (7 min): "How much loss history does the account share upfront? Hidden claims surface at renewal and kill the relationship."
- Renewal posture (5 min): "What's the renewal cadence — annual, multi-year? Where are the carriers winning multi-year deals today?"
Coach the room on the one-skill rule — every underwriter picks one inspection block per quarter to deeply improve.
Section 3 — The Risk-Engineering Conversation That Wins (15 min)
The risk-engineering pre-bind assessment is the moment cyber-insurance deals are decided. Walk the room through three failure modes and three wins.
Failure modes to ban. Questionnaire-only assessments — 200-question forms without verification do not lower loss ratio. No vendor-list steering — failing to recommend Coalition, At-Bay, or Resilience-endorsed vendors leaves loss-ratio gains on the table. Single-meeting risk reviews — risk engineering is a multi-touch motion, not a one-call assessment.
Wins to coach. Continuous external scanning + structured questionnaire. Walk the room through Coalition's and At-Bay's published pre-bind workflows — both combine external scanning with structured questionnaire. Vendor-list steering. Recommend the customer move to a vetted MDR, EDR/XDR, and identity vendor before bind.
Quarterly check-ins post-bind. The check-ins surface risk changes and prevent loss-ratio surprises.
End with Aon's internal underwriting mantra: *"The policy is the back-stop. Risk engineering is the product."*
Section 4 — Handling Carrier Competition (10 min)
The room will face Chubb, AIG, Beazley, Coalition, and At-Bay on every Tier-2 and Tier-3 account. Coach the room on three counter-moves.
Counter-move 1 — The risk-engineering depth wedge. Ask the broker: *"Which carrier on your panel offers continuous external monitoring post-bind, not just at-bind? Coalition and At-Bay publish this. If your incumbent does not, why not?"*
Counter-move 2 — The vendor-endorsement breadth wedge. Ask: *"How many vetted vendors does your incumbent carrier publish? The breadth determines how much loss-ratio lift the broker can engineer for the customer."*
Counter-move 3 — The sub-limit transparency wedge. Ask: *"Does your incumbent publish standard sub-limit structures upfront, or does the customer find out at the binding meeting? Transparency wins multi-year deals."*
Show Force Management's command-of-the-message rule: *"Sell the underwriting discipline, not the policy limit."*
Section 5 — Pricing and Sub-Limit Conversation (10 min)
Coach the room through the three pricing landmines.
Landmine 1 — Headline limit without sub-limit clarity. Quoting a $25M headline without explicit sub-limits sets up a friction-laden bind. Quote sub-limits upfront.
Landmine 2 — Multi-year discount math. Three-year cyber programs justify 8–14% discount; five-year programs justify 15–22%. Anything beyond is reinsurance-margin-destroying.
Landmine 3 — The procurement-only meeting. When the customer's procurement runs the bind meeting solo without the CFO or CISO, refuse. Insist on the joint risk-review meeting. The "no procurement-only" rule.
Section 6 — The Trap-Set for Multi-Year Renewal (5 min)
The renewal sale begins on day one. Coach the room on the four month-9 trap-sets.
Trap-set 1 — Quarterly external-monitoring score delivered. Land the quarterly risk-score delivery as a contractual deliverable. The customer experiences the cadence and cannot go back to annual.
Trap-set 2 — Vetted-vendor migration completed within 6 months. Steer the customer to 2+ vetted vendors (typically MDR + EDR + identity) within 6 months. Each vendor migration is incremental loss-ratio lift and incremental customer stickiness.
Trap-set 3 — Cyber-insurance broker letter at month 9. Get the broker to write a 2026 program-fit letter at month 9. The letter locks in the broker as a defender at renewal.
Trap-set 4 — Joint TCO dashboard in QBR. Build the risk-engineering ROI dashboard into the QBR. By month 12, the dashboard is the renewal narrative.
Close the session by reading Jeb Blount's rule from *"Fanatical Prospecting"* aloud: *"The renewal is sold on day one, not on day 365."*
FAQ
Should we sell to the retail broker or the customer directly? Broker-led for accounts under $200K premium; joint broker-and-customer for accounts above. The broker is the first sale in the broker-led market.
How do we handle a customer who has just renewed with Chubb or AIG? Run a complementary line — D&O cyber wrap, contingent BI, technology E&O — that doesn't overlap the primary. Build program-fit proof for the displacement conversation at next renewal.
What is a realistic sub-limit structure for a mid-market $10M policy in 2027? Extortion sub-limit at 25–40% of headline; business-interruption at 50%; third-party liability at 50%; dependent BI at 35%. Anything tighter concentrates severity risk on the carrier.
How do we price against Coalition's data-driven positioning? Coalition wins on technology-led underwriting; we win on breadth of program coverage and reinsurance capacity. Position as complements at the entry tier.
What if the customer asks us to skip the risk-engineering assessment to move faster? Refuse politely. Skipping the assessment loses the loss-ratio differential and almost always reprices the policy at renewal. Aon's internal rule is firm: *"No assessment, no preferred rate."*
Sources
- Marsh McLennan — Global Cyber Insurance Market Index (2026)
- Coalition Inc. — Cyber Claims Report and Vetted-Vendor Program (2026)
- At-Bay — Annual Underwriting and Loss Ratio Disclosure (2026)
- Munich Re — Cyber Reinsurance Treaty Capacity Report (2026)
- Aon — Cyber Insurance Renewal Benchmark and Risk Engineering Playbook (2026)
- Beazley plc — Annual Report and Cyber Claims Data (2026)
- Force Management — Command of the Message and MEDDPICC Reference (2026)
- Andy Paul — "Sell Without Selling Out" Discovery Cadence
- Jeb Blount — "Fanatical Prospecting" Renewal-First Doctrine
- NetDiligence — Cyber Claims Study (2026)