Cyber Insurance Retention vs Premium Tradeoff Calculator
Higher retentions cut premiums, but they move cash risk onto the plant. This calculator compares two quotes on expected annual cost so the choice rests on frequency and size of loss rather than on the premium line alone.
Your numbers
Claim-sized events, not every phishing email.
Response, restoration, legal and lost production for a typical covered event.
Your results
Uses one average loss per incident. Real losses vary and policies have sublimits, waiting periods and exclusions. Review the actual policy with your broker.
Expected annual cost vs average loss per incident
Sweeps Average loss per incident from 50000 to 2000000, holding your other inputs fixed.
Underwriting evidence pack
Optional help describing your on-prem data controls for a cyber insurance application.
Optional. The tool and every export work without this. No spam.
How to use it
Enter the two quotes you are weighing: the retention and annual premium for each. Then estimate how often a claim-sized incident occurs and the average cost when it does. The calculator adds the premium to the expected retained loss for each option and shows which is cheaper on average, plus the extra cash you would need on hand after an event with the higher retention.
- Use only incidents large enough to approach the retention.
- Check whether the retention applies per claim or in aggregate.
- Confirm that business interruption has a waiting period in hours, not a retention in dollars.
The math
For each option, retained loss per incident is the smaller of the loss and the retention, plus any amount above the limit stacked on the retention. Expected annual cost is the premium plus incident frequency times retained loss. The saving is the difference. The chart sweeps average loss, which shows the break-even where the lower premium stops compensating for the larger retained share.
Reading the result
At small average losses both policies leave you paying roughly the loss itself, so the cheaper premium wins. As losses approach and exceed the higher retention, the low-retention policy starts paying out more and the lines converge or cross. If your realistic loss sits well above both retentions, the premium difference is the whole story. If it sits near the lower retention, a high retention is mostly a premium discount for risk you were already carrying.
What the numbers leave out
Insurers price in your controls. MFA on remote access, offline backups, EDR and tested incident response often change eligibility and price more than retention choices. Policy terms such as ransomware sublimits, war exclusions and coinsurance can matter more than the headline limit. Treat this as a decision aid and take the quotes to a qualified broker.
Frequently Asked Questions
Is a higher retention always cheaper?
No. It is cheaper on average only if the premium saving exceeds the extra expected retained loss. If incidents are frequent or costly, the lower retention often wins, and a high retention also needs real cash available.
What incident frequency should I use?
Use your own history of claim-sized events and sector data from brokers. If you have had none, a range of 0.1 to 0.5 per year tests the decision without claiming false precision.
Does this handle sublimits?
Only the overall limit. Ransomware, social engineering and business interruption sublimits can lower real recovery well below the policy limit, so read the schedule and adjust the loss input accordingly.
Should I model several incidents a year?
You can raise frequency above one, but check whether the retention applies per event or annually in aggregate, because that changes the retained cost materially.
If you need to evidence your controls to underwriters, Netray can help document how your ERP and plant data stay protected inside your own environment.
Related Tools
Annualized Loss Expectancy Cyber Risk Calculator
Compute SLE, ALE and the net return of a security control so you can justify spend to finance in plain numbers.
ERP OperationsRansomware Recovery Time Objective Calculator
Estimate realistic hours to restore a plant after ransomware from data volume, restore speed, server rebuilds and validation.
Compliance & ContractsMFA Rollout Risk Reduction Calculator
Model how many account takeovers extending MFA to more users prevents, and whether the licence and support cost is justified.
Compliance & ContractsCyber Risk Register with ALE Worksheet
Log cyber risks for a plant or company, compute expected annual loss before and after controls, and export a ranked register to Excel.
More Compliance & Contracts tools
See all- ISO 14001 Internal Audit Checklist
- Environmental Compliance Obligations Register Worksheet
- AI Governance Policy Template for Manufacturers
- AI Acceptable Use Policy Template for ERP Users
- IEC 62443 Security Levels and Parts Reference
- NIST CSF 2.0 Categories Reference for Manufacturers
- OT Vendor Remote Access Hardening Checklist
- OT Network Segmentation Maturity Assessment
- SAP SoD Residual Risk Score Calculator