Skip to main content
Category: Premium & Actuarial Pricing

Direct Written Premium

Also known as: DWP, direct written premiums, direct premium
Simply put

Direct written premium is the total amount of premium an insurer charges policyholders for the policies it issues during a given period, before subtracting any premium it passes along to reinsurers. It reflects the gross premium the insurer takes on directly from its customers. This is a financial and reporting metric, not a measure of coverage or resilience.

Formal definition

Direct written premium (DWP) is the total written premium recorded by an insurer for policies it issues over a defined period, without any allowance for premiums ceded to reinsurers. It represents gross written premium at the direct level, prior to reinsurance cessions, and is distinct from net written premium (which nets out ceded amounts) and from earned premium (which recognizes premium over the coverage period as it is earned rather than when written). DWP is used in required regulatory reporting and portfolio analysis, and characterizes an insurer's revenue and volume rather than the scope, trigger, or adequacy of any policy's coverage.

Why it matters

Direct written premium is one of the primary measures of an insurer's volume and top-line revenue in a line of business such as cyber insurance. Because it captures the gross premium charged on policies an insurer issues directly to policyholders before any reinsurance is accounted for, it is a useful indicator of how much business an insurer is writing and where that revenue originates. For those tracking the growth or contraction of a market segment, DWP offers a view of scale that is not distorted by an individual insurer's reinsurance arrangements.

It is important to understand what DWP does not tell you. It characterizes an insurer's revenue and volume, not the scope, trigger, or adequacy of any particular policy's coverage. A high or growing direct written premium figure says nothing about whether a given claim will be covered, how exclusions and conditions apply, or whether an insured is resilient to a cyber event. Coverage outcomes depend on policy wording, endorsements, exclusions, and jurisdiction, not on portfolio metrics. Treating DWP as a proxy for coverage strength or policyholder protection would be a category error.

DWP should also be kept distinct from related premium measures. It is not the same as net written premium, which nets out amounts ceded to reinsurers, nor earned premium, which recognizes premium over the coverage period as it is earned rather than when written. Because these figures answer different questions, using the wrong one can misstate an insurer's exposure retention or its recognized revenue for a period.

Who it's relevant to

Underwriters and insurer finance teams
For underwriters and insurer finance and reporting staff, direct written premium is a core measure of the volume of business written in a line such as cyber. It supports required regulatory reporting and portfolio analysis, and provides a starting point from which net written premium and earned premium are derived. It reflects gross premium at the direct level, so it should be read alongside reinsurance cessions to understand retained exposure.
Insurance brokers
Brokers may encounter DWP as an indicator of an insurer's scale and where its revenue originates within a market segment. It can inform a view of how active an insurer is in a given line, but it is not a measure of coverage breadth or claims-paying behavior. Whether a client's loss is covered turns on policy wording, exclusions, and conditions, not on an insurer's premium volume.
Risk managers and resilience planners
Risk managers should treat direct written premium as a financial and reporting metric that says nothing about their own organization's resilience or the adequacy of a specific policy. DWP characterizes an insurer's revenue and volume, not coverage triggers, sublimits, or the strength of any control. It should not be confused with resilience measures or used to judge whether a policy will respond to a particular incident.

Inside DWP

Gross premium written
Direct written premium represents the total premium an insurer contracts to receive from policyholders for policies written during a given period, before any deductions for reinsurance ceded. It reflects business written directly with insureds rather than assumed from other carriers.
Before reinsurance adjustment
The 'direct' qualifier signals that the figure is measured before ceding premium to reinsurers and before including premium assumed through reinsurance treaties. It is therefore distinct from net written premium, which reflects reinsurance transactions.
Written versus earned
'Written' refers to premium booked when the policy is issued or contracted, not premium recognized over the coverage period. Written premium differs from earned premium, which is allocated across the policy term as coverage is provided.
Measurement period
Direct written premium is reported over a defined accounting period (such as a quarter or year), allowing comparison of an insurer's or a line of business's production volume across time.
A production and market-size metric
In the cyber insurance context, direct written premium is commonly used to gauge the size and growth of the market or of an individual insurer's cyber book. It is an insurer financial and volume metric, not a coverage term, a policy trigger, or a resilience measure.

Common questions

Answers to the questions practitioners most commonly ask about DWP.

Is direct written premium the same as the premium an insurer actually keeps as revenue?
No. Direct written premium reflects the premium contracted for policies an insurer writes directly, before adjustments for reinsurance ceded or assumed. It is not the same as net written premium, which subtracts reinsurance ceded, and it is not earned premium, which recognizes revenue only as coverage elapses over the policy term. Treating direct written premium as retained revenue overstates what the insurer actually keeps and recognizes.
Does a higher direct written premium mean an insurer is more financially sound or better at underwriting?
Not necessarily. Direct written premium measures volume of business written, not profitability or solvency. An insurer can grow direct written premium rapidly while pricing inadequately relative to losses. Assessing financial strength requires looking at loss ratios, combined ratios, reserves, capital adequacy, and reinsurance arrangements alongside premium figures, not premium volume in isolation.
How does direct written premium differ from net written premium and earned premium when reading an insurer's financials?
Direct written premium is the starting point: premium on policies written directly, before reinsurance. Net written premium adjusts this for reinsurance ceded and assumed, showing the premium tied to risk the insurer retains. Earned premium then converts written figures to the portion recognized over elapsed coverage. When reviewing a cyber insurer, comparing these three helps you see how much business is written, how much risk is transferred to reinsurers, and how much revenue has actually been recognized in the period.
Why does the timing of when premium is written matter for interpreting the figure?
Direct written premium is recognized when a policy is written, typically at inception or renewal, regardless of the policy term still to run. This means the figure reflects new and renewal business booked in a period rather than coverage provided over that period. A quarter with heavy renewals can show elevated direct written premium that does not correspond to earned revenue until later periods, so timing should be considered when comparing across periods.
How can direct written premium be used to gauge activity in the cyber insurance market?
Aggregate direct written premium is often used as an indicator of market size and growth in a line such as cyber. Rising direct written premium can reflect more policies, higher rates, or both, so it should be interpreted alongside policy counts and rate movement to distinguish exposure growth from price increases. On its own it does not indicate claims experience, capacity availability, or terms and conditions in the market.
What should a broker or risk manager keep in mind when comparing direct written premium across insurers?
Ensure the figures cover the same line of business, the same period, and the same jurisdictional or regulatory reporting basis, since definitions and reporting conventions can differ. Compare on a consistent gross or direct basis rather than mixing direct and net figures. Remember that premium volume alone does not speak to an insurer's appetite, coverage breadth, exclusions, or claims-paying behavior, which matter more than volume for placement decisions.

Common misconceptions

Direct written premium is the same as the premium an insurer keeps or earns.
Direct written premium is measured before reinsurance and before the premium is earned over the policy term. Net written premium reflects reinsurance ceded and assumed, while earned premium reflects the portion recognized as coverage is provided. These are distinct figures and should not be used interchangeably.
Growth in direct written premium indicates that the underlying cyber risk or claims exposure is well managed or that insureds are more resilient.
Direct written premium measures production volume, not loss experience or resilience. It says nothing by itself about loss ratios, the adequacy of pricing, or whether policyholders have effective security controls. Insurance is a risk-transfer mechanism and does not reduce the likelihood of an incident; premium volume should not be read as a resilience indicator.
Direct written premium describes coverage scope or what a policy will pay.
Direct written premium is an insurer-side accounting and market-sizing metric. Whether any given loss is covered depends on policy wording, endorsements, exclusions, conditions, and jurisdiction, none of which are captured by a premium volume figure.

Best practices

When analyzing market data, confirm whether a cited figure is direct, net, or assumed premium, and whether it is written or earned, before drawing conclusions about market size or insurer scale.
Specify the accounting period and line of business (for example, standalone cyber versus cyber embedded in package policies) when comparing direct written premium across insurers or over time, since inconsistent categorization can distort comparisons.
Do not use direct written premium as a proxy for profitability or risk quality; pair it with loss ratios and other performance metrics, which are separate measures, when assessing an insurer's cyber book.
Avoid treating premium growth as evidence of improved policyholder resilience; evaluate resilience through controls, continuity planning, and recovery objectives, which are distinct from any premium metric.
Cross-check reported figures against the definitions used by the relevant reporting regime or data source, as classification of what counts as direct cyber premium can vary and may not be defined uniformly across insurers or jurisdictions.
Keep direct written premium separate from coverage discussions with insureds; when advising on what a policy pays, reference the specific policy wording, endorsements, and exclusions rather than production or premium-volume metrics.
a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.