The moment usually arrives by email. A cyber insurance renewal quote lands, the number is different from last year, and the owner cannot tell whether the market moved or their own business triggered the change. Maybe carriers are repricing cyber coverage everywhere. Maybe the business added a server, took on client data, or lost a security control that mattered to the underwriter. The quote alone does not say. Latest survey data can tell you which direction the cyber market is moving in general, and it cannot tell you what your specific business deserved.
That distinction is the whole value of reading the surveys. A rate survey aggregates what many buyers paid across a period, usually reported by line of coverage, and it gives a baseline. If the survey shows cyber premiums broadly rising or broadly easing and your quote moved the same way, the market is doing most of the work. If your quote moved sharply against the survey direction, the driver is probably something about your business, your security posture, or your claims history. This article explains where those figures come from, who the requirements land on hardest, and how to use them at renewal. One note on method: this piece will not quote specific premium percentages or name specific surveys, because the material backing this article does not state them. It points you to where the named, dated figures live instead, and any figure you act on should carry its own source and date.
What the survey data covers
Cyber premium surveys are typically market studies published by insurance trade publishers, rating organizations, and brokerages. They report rate change, which is the percentage move in premium on similar exposure, sometimes broken out by coverage line and by size or industry of buyer. A rate change figure describes the market, not your renewal. Two businesses in the same town can see opposite outcomes because of their controls, their claims, and their data footprint. Surveys also track underwriting requirements, which are the conditions a carrier sets before offering or renewing coverage. Multi-factor authentication, or MFA, is the requirement most often cited in cyber underwriting. MFA means a login asks for something beyond a password, such as a code from a phone, so a stolen password alone does not open the door.
Read any survey figure with three questions in mind. Who published it, since trade publishers, brokers, and analysts each have their own vantage point. What period it covers, since a figure from two years ago says little about this quarter. And what slice it measures, since a rate change across all commercial lines differs from a cyber-only figure. A survey that answers those three questions clearly is usable. One that does not name its basis is worth skimming and not much more.
Who this data is for and who it is not for
This data is for two kinds of readers. An owner or finance lead buying commercial insurance can use it to pressure-test a renewal quote and to walk into a negotiation knowing whether the carrier's story matches the market. A broker, agency owner, or analyst can use it to set client expectations and to spot where underwriting is tightening before clients feel it. It is not for anyone who wants a guaranteed number. Surveys describe what already happened across many buyers, and your premium depends on your own controls, exposure, and history. Treat the data as a baseline, not a quote.
How to use survey data at renewal
- Pull your current quote Get your renewal premium and your expiring premium side by side, and note what changed in your business over the year.
- Find recent cyber rate data Locate a published survey or market report on cyber premium movement, and note its publisher and release date.
- Compare direction and size Ask whether your quote moved with the survey trend, and whether the size of your move is in line with the reported figures.
- Check your security posture Confirm where you stand on underwriting requirements such as MFA before assuming the market explains your price.
- Ask your broker for the driver Have your broker separate the market-driven part of your change from the part tied to your business specifically.
- Fix what you control Close any control gaps the underwriter flagged, since requirements like MFA often move the price more than the market does.
The MFA point deserves emphasis. When underwriting requirements tighten, a business that already has MFA enabled across email, remote access, and administrative accounts often faces less friction than one that does not. Requirements are a place where preparation pays, and they are usually cheaper to meet than the premium difference they cause. Ask your broker or IT provider which controls the carriers you quote with actually verify, and document what you have. Underwriters respond to evidence.
Where to keep tracking these figures
Cyber rate figures are not one-and-done facts. They move quarter to quarter, and a number you read once can be stale by your next renewal. Commercial Broker Guide is one place this tracking happens. The site publishes news and market data such as premium changes by line of coverage, rankings of the largest brokers of U.S. business, and a directory of brokers by specialty and state. Every figure on the site names its source and the date it was checked, which is the habit this article recommends you apply to any survey number. The site also publishes a short weekday newsletter called The Brief, which is a low-effort way to keep the current figures in view.
You can also do this without any product. Set a calendar reminder a month or two before each renewal and search for the most recent cyber market report from a publisher you trust. Trade press, rating organizations, and large brokerages all publish them. Read the rate change figure for cyber specifically, not the commercial lines aggregate, and write down the source and date next to it. That note becomes your baseline for next year.
Is cyber insurance getting cheaper or more expensive?
It depends on the period you look at, and this article does not quote a current figure because no cited source in its material states one. Published surveys report cyber rate movement regularly, and the way to answer the question for yourself is to read the most recent one and note its release date.
What is MFA and why do insurers care?
MFA, or multi-factor authentication, means a login requires a second proof beyond a password, such as a code from a phone. Insurers treat it as a basic security control, and it is among the requirements most commonly tied to cyber underwriting.
Can a survey tell me what my renewal will cost?
No. A survey describes what many buyers paid over a period. Your premium depends on your own exposure, controls, and claims history. Use the survey as a baseline to test your quote against, not as a predictor.
Where do I find the named, dated figures?
Insurance trade publishers, rating organizations, and brokerages publish cyber market reports. Commercial Broker Guide tracks market data by line of coverage and names the source and date on every figure it publishes, and its weekday newsletter The Brief carries the updates.
What if my quote moved opposite to the survey trend?
That points to something specific to your business, such as a change in your data footprint, a claim, or a missing security control like MFA. Ask your broker to identify the driver in writing.
Insurance tips an owner can use.
Plain English. One short email a week.
Get The Brief