This month we are looking closely at cyber security across residential surveying practices. One area that is frequently misunderstood is insurance.
Cyber incidents are no longer confined to large organisations or technology firms. Automated attacks now routinely target small professional practices, including surveying firms, because they are perceived as data-rich but resource-constrained.
Many surveyors still assume their Professional Indemnity insurance will protect them if something goes wrong digitally. In most cases, it will not.
The National Cyber Security Centre is clear: “Cyber insurance does not prevent cyber incidents, but it can help organisations recover more quickly and effectively.”
That distinction is important.
Why PI Insurance Isn’t Enough
Professional Indemnity insurance is designed to cover claims arising from professional advice or services, such as errors in reports or negligence claims. It does not usually extend to ransomware attacks, data breaches, business interruption following an IT outage, or the cost of restoring systems.
Jonathan Fong, Head of General Insurance Policy, ABI “Cyber insurance is more than just a financial safety net. The right policy not only supports businesses in the aftermath of an incident but can also help prevent attacks through access to expert advice, threat monitoring, and incident response planning. With cyber threats continuing to grow in scale and sophistication, it needs to be a critical component of every organisation’s modern risk management strategy.”
For surveyors, this matters. Client files, photographs, floor plans, valuations and personal data are all digital assets. Losing access to them, even temporarily, can halt operations entirely.
What cyber insurance typically helps With
Most standalone cyber policies provide support across three core areas:
Incident response
Access to forensic IT specialists, containment support and technical recovery teams.
Legal and regulatory costs
Advice on GDPR obligations, assistance with ICO notifications and potential defence costs.
Business continuity
Support with system restoration and, in some cases, cover for loss of income during downtime.
However, cover is never unconditional.
The Catch:
Security Expectations
Insurers have significantly tightened requirements in recent years. Multi-factor authentication, secure backups, patch management and strong password controls are now commonly baseline conditions for cover.
The Information Commissioner’s Office says: “It might not be possible to prevent every personal data breach, but you can minimise the risk significantly”
If systems are unpatched, passwords reused or backups missing, claims may be restricted or refused. Cyber insurance is a financial safety net, not a substitute for operational discipline.
What This Means for Small Surveying Practices
Smaller firms often feel insulated by their size. In reality, attackers rely on automation, not reconnaissance. The impact, however, is anything but automated – downtime, missed deadlines, client confidence, and regulatory pressure all land at once.
Key takeaway: cyber insurance should be viewed as part of risk management, not an afterthought.
Actions worth taking now
- Confirm whether you have standalone cyber insurance
- Ask what security controls are required for cover
- Check exclusions and incident response support
- Treat insurance as a backstop, not a solution
Continue Reading
Browse more blog posts, features and practical guides covering industry developments, operational strategy and technology for surveyors.
