---
title: "Maintain cyber insurance and understand your policy's conditions and exclusions."
impact: CRITICAL
impactDescription: "essential for correctness or security"
tags: cybersecurity-compliance, legal, nis2, dora, sec-cybersecurity-rules
---

## Maintain cyber insurance and understand your policy's conditions and exclusions.

Review your policy annually, ensure you are meeting all required security controls, and understand what is and is not covered — particularly regarding ransomware, nation-state attacks, and war exclusions.