Category: Coverage Types

Business Interruption Coverage

Also known as: BI, Business Interruption Insurance, Business Income Coverage

Simply put

Business interruption coverage is a type of insurance that helps replace the income a business loses when it cannot operate normally because of a covered event. It can also help pay ongoing fixed expenses and certain extra costs, such as operating from a temporary location, during the period the business is disrupted. It does not reduce the chance that a disruption will happen; it addresses the financial loss after one occurs.

Formal definition

Business interruption coverage is a first-party insurance grant that indemnifies an insured for lost business income and continuing operating expenses incurred while operations are suspended or impaired as a result of a covered peril, typically following physical loss or damage to covered property, subject to the specific policy wording. In many forms it also responds to extra expenses, such as costs of operating from an offsite or temporary location, and applies for a defined period of restoration or indemnity period. Whether any given loss is covered depends on the triggering language, applicable waiting periods, sublimits, exclusions, and jurisdiction; the traditional physical-damage trigger distinguishes standard BI from cyber-specific business interruption grants, which are typically addressed under separate wording or endorsements.

Why it matters

A disruption to operations can threaten a business's survival even when its physical assets are eventually restored, because fixed expenses such as payroll, rent, and loan obligations continue to accrue while revenue stops. Business interruption coverage exists to address this financial gap, helping to replace lost income and pay ongoing expenses during the period a business cannot operate normally following a covered event. It is a first-party coverage, meaning it responds to the insured's own losses rather than to liability owed to others.

Understanding BI coverage matters because it does not reduce the likelihood that a disruption will occur; it transfers the financial consequence of a disruption after it happens. It is therefore a risk-transfer mechanism, not a substitute for business continuity planning, disaster recovery, or the operational resilience measures that shorten downtime. An organization that treats BI insurance as a replacement for resilience investment may find that recovery still takes longer, and that recovery is more costly, than its coverage anticipates.

The scope of what BI responds to is highly conditional. Traditional business interruption coverage is typically triggered by physical loss or damage to covered property, which is a critical distinction for risk managers evaluating cyber exposures: a purely digital disruption with no physical damage may fall outside a standard BI grant and may instead require cyber-specific business interruption wording or an endorsement. Whether any particular loss is covered depends on the triggering language, waiting periods, sublimits, exclusions, and jurisdiction, so the specific policy wording, rather than the general concept, governs the outcome.

Who it's relevant to

Risk Managers

Risk managers use BI coverage as one component of a broader risk-financing strategy, pairing it with mitigation and continuity planning rather than relying on it alone. They should pay close attention to the trigger language, waiting periods, and any gap between a physical-damage trigger and non-physical exposures such as cyber events, which may require separate wording.

Insurance Brokers and Underwriters

Brokers and underwriters assess the adequacy of income and expense limits, the length of the indemnity or restoration period, and the interaction of sublimits and exclusions with the insured's actual exposure. They also help distinguish standard property-based BI from cyber-specific business interruption grants so that a client's coverage matches the perils it faces.

Resilience and Continuity Planners

Continuity planners should recognize that BI insurance transfers financial loss but does not shorten downtime or reduce the chance of disruption. Their recovery objectives and continuity measures determine how long a business is impaired, which in turn affects the size of an eventual BI claim; insurance and resilience are complementary, not interchangeable.

Legal and Compliance Professionals

Legal and compliance professionals focus on the conditional nature of coverage, including triggering language, conditions precedent, exclusions, and jurisdictional differences in how policy wording is interpreted. They play a central role where disputes arise over whether a given event, particularly one without physical damage, falls within the coverage grant.

Inside BI

First-Party Loss Basis

Business interruption (BI) coverage in cyber policies is a first-party coverage that responds to the insured's own income loss and associated expenses arising from a covered disruption to its systems or operations. It does not address liability owed to third parties, which falls under separate third-party coverage sections.

Coverage Trigger

BI coverage typically activates upon a defined event such as a network security failure, a covered cyber incident, or an interruption to the insured's computer systems. Whether an outage triggers coverage depends on the specific wording of the triggering clause, and some forms require an actual security breach while others may respond to broader operational failures.

Waiting Period (Time Retention)

Many policies impose a waiting period, often expressed in hours, that must elapse before BI losses begin to accrue for coverage purposes. This functions as a time-based deductible and is distinct from a monetary retention; losses during the waiting period are typically not indemnified, subject to the specific wording.

Indemnity Period / Period of Restoration

The window during which lost income and continuing expenses are covered, generally running from the trigger until systems or operations are restored or a stated maximum period ends. The defined period of restoration in the policy is a coverage term and should not be conflated with an organization's recovery time objective (RTO), which is an internal resilience target.

Measure of Loss

BI indemnity is commonly calculated as lost net income plus continuing normal operating expenses the insured would have earned or incurred absent the disruption, subject to policy wording. Quantification usually requires financial documentation and may involve forensic accounting.

Contingent Business Interruption (CBI)

An extension, where offered, that responds to income loss caused by a disruption at a third party the insured depends on, such as a technology service provider. CBI is often subject to separate sublimits, conditions, and stricter triggering requirements, and its availability and scope vary by form.

Sublimits, Retentions, and Exclusions

BI coverage may carry its own sublimit distinct from the overall policy limit, apply a monetary and/or time retention, and be subject to exclusions such as war, infrastructure/utility failure, or failure-to-maintain-standards exclusions. Coverage is conditional and depends on endorsements, conditions precedent, and jurisdiction.

Extra Expense

Costs incurred to reduce or avoid business interruption loss, such as temporary workarounds, are often addressed alongside BI coverage, sometimes within the same insuring agreement and sometimes separately. Treatment and limits depend on the specific wording.

Common questions

Answers to the questions practitioners most commonly ask about BI.

Does business interruption coverage reimburse me for the cost of restoring my data and rebuilding my systems?

Not typically under the business interruption insuring agreement itself. Business interruption coverage responds to lost income (and often continuing expenses) during a period of restoration, not to the direct costs of restoring data or rebuilding systems. Those costs generally fall under separate first-party insuring agreements such as data restoration or digital asset recovery coverage. Both may be first-party in nature, but they are distinct grants with their own sublimits and conditions, so whether and how each responds depends on the specific policy wording.

Since I have business interruption coverage, does that mean my organization is resilient to an outage?

No. Business interruption coverage is a risk-transfer mechanism that may reimburse certain financial losses after an incident; it does not reduce the likelihood of an outage or shorten the actual time to recover. Resilience is a function of controls, redundancy, and recovery capability measured against objectives such as RTO and RPO. Insurance can offset some financial consequences of downtime, but it is not a substitute for business continuity or disaster recovery planning and does not by itself constitute resilience.

How does the waiting period affect what I can actually recover?

Many business interruption forms include a waiting period (sometimes framed as a time-based retention) that must elapse after the triggering event before covered loss begins to accrue. Losses incurred during the waiting period are commonly not recoverable, though some forms apply coverage retroactively once the period is exceeded while others do not. The length of the waiting period and how it interacts with any monetary retention are set by the specific wording, so review both together to understand your true out-of-pocket exposure for a short-duration event.

How is the period of restoration defined, and when does my recoverable loss end?

The period of restoration typically begins when the covered trigger occurs (often subject to the waiting period) and continues until systems or operations are restored, or should reasonably have been restored, to their pre-incident condition. Some forms extend this with a limited period after restoration to allow revenue to recover. The precise start point, end point, and any extended indemnity provision vary by form, so the recoverable window depends on the specific wording rather than on how long the disruption actually felt to the business.

What documentation should we maintain to support a business interruption claim?

Insurers generally expect financial records sufficient to establish the income the business would have earned absent the incident, such as historical revenue and expense figures, budgets or forecasts, and records distinguishing continuing from saved expenses. Contemporaneous records of the incident timeline, restoration activities, and any extra expenses incurred are also commonly relevant. Because proof-of-loss requirements and conditions precedent to payment are set by the policy, confirm the specific documentation obligations and any deadlines in your wording, and engage a forensic accountant where the policy contemplates one.

Can causes like a supplier's outage, a system failure without an attack, or an infrastructure disruption trigger business interruption coverage?

It depends entirely on the covered causes of loss and the exclusions in your form. Some policies extend business interruption to certain dependent or contingent scenarios (for example, an outage at a supplier or service provider) through specific endorsements, and some address system failure that is not attributable to a security event. Others limit the trigger to a defined security incident and may apply exclusions such as infrastructure or war exclusions. Because these grants and carve-outs vary significantly across insurer forms, confirm which causes are covered, which are excluded, and whether an endorsement is required.

Common misconceptions

Cyber business interruption coverage means any downtime that hurts revenue is covered.

Coverage responds only when a defined trigger is met, after any applicable waiting period, within the period of restoration, and subject to sublimits, retentions, and exclusions. Outages that do not meet the triggering clause, or losses falling within the waiting period, are typically not indemnified.

Holding BI coverage makes an organization resilient and reduces the chance of an outage.

BI coverage is a risk transfer mechanism that addresses financial consequences after a disruption; it does not reduce the likelihood of an incident and does not by itself constitute resilience. It is complementary to, not a substitute for, business continuity and disaster recovery capabilities.

The policy's period of restoration is the same as the organization's recovery time objective (RTO).

The period of restoration is a coverage term defined by policy wording that bounds the indemnity window, while RTO is an internal resilience target for how quickly systems should be restored. They are distinct concepts and may not align; a slow restoration does not extend coverage beyond the defined period.

Best practices

Read the triggering clause carefully to confirm whether coverage requires a security breach or also responds to broader system or operational failures, and align expectations with the specific wording.

Quantify the waiting period and any monetary retention, and model their combined effect on recoverable loss for realistic outage durations before binding.

Compare the policy's defined period of restoration against your internal RTO and RPO so you understand the gap between the indemnity window and your actual recovery capability.

Assess whether contingent business interruption coverage is needed for critical third-party and technology dependencies, and review its separate sublimits, triggers, and conditions.

Review exclusions and conditions precedent, including war, infrastructure/utility failure, and failure-to-maintain-standards provisions, to identify scenarios where BI loss may not be indemnified.

Maintain financial records and documentation sufficient to substantiate lost net income and continuing expenses, since BI claims typically require detailed proof of loss.