Loading...
Exhibit 3- Comparison4LOCKTON COMPANIES |Cyber Renewal SummaryExpiring Renewal Option New Option New OptionInsurerCorvus Insurance Agency, LLC(Accredited Specialty Insurance Company)Corvus Insurance Agency, LLC(Travelers Excess and Surplus Lines Company)Resilience(Homeland Insurance Company of New York)Coalition(Lloyd’s)Admitted/Non-admitted: Non-Admitted Non-Admitted Non-Admitted Non-AdmittedProposed Policy Term: 10/1/2022 – 10/1/2023 10/1/2023 – 10/1/2024 10/1/2023 – 10/1/2024 10/1/2023 – 10/1/2024Aggregate Limit: $2,000,000 $2,000,000 $2,000,000 $2,000,000Maximum Aggregate Retention: $100,000 $100,000** $100,000$250,000^ / $0 for Coalition Incident ResponseWaiting Period each BI Loss:10 Hours 10 Hours12 Hours8 Hours3rdParty Insuring AgreementsPrivacy and Security Liability$2,000,000 $2,000,000 $2,000,000 $2,000,000Regulatory Investigations, Fines and Penalties$2,000,000 $2,000,000 $2,000,000 $2,000,000PCI DSS Assessments $2,000,000 $2,000,000 $2,000,000 $2,000,000Media Liability$2,000,000 $2,000,000 $2,000,000 $2,000,0001stParty Insuring AgreementsNetwork Extortion (Ransomware)$2,000,000 $2,000,000 $2,000,000 $2,000,000Privacy & Security Breach Response Coverage$2,000,000 $2,000,000 $2,000,000 $2,000,000Business Interruption (Security Failure, System Failure)$2,000,000 $2,000,000 $2,000,000 $2,000,000Contingent Business Interruption (Security Failure, System Failure)$2,000,000 (IT, Non-IT Vendors) $2,000,000 (IT, Non-IT Vendors)$1,000,000 (IT, Non-IT Vendors)$2,000,000 (IT Vendors)$1,000,000 (Non-IT Vendors System Failure)Digital Asset Restoration$2,000,000 $2,000,000 $2,000,000 $2,000,000Consequential Reputational Loss$2,000,000 $2,000,000 $2,000,000 $2,000,000Bricking (Computer Hardware Replacement)$2,000,000 $2,000,000 $2,000,000 $2,000,000Total Annual Premium*$104,486*($52,243 per $1M)$75,577*($37,788 per $1M; -$28,909 or 28% decrease YOY)$80,000*($40,000 per $1M; -$24,486 or 23% decrease)$85,228*($42,614 per $1M; -$19,258 or 18% decrease YOY)*Premium subject to commission deletion; does not include applicable taxes and fees.**Retention can be decreased by 25% (up to $25,000) for certain insuring agreements upon completion of Corvus Dashboard Security Questionnaire modules^SIR may be reduced by $10K if MFA was in place for a claim arising out of business email compromise 5LOCKTON COMPANIES |Cyber Renewal Summary (continued)Expiring Renewal Option New Option New OptionInsurer Corvus Insurance Agency, LLC Corvus Insurance Agency, LLCResilience(Homeland Insurance Company of New York)Coalition(Lloyd’s)Admitted/Non-admitted: Non-Admitted Non-Admitted Non-Admitted Non-AdmittedProposed Policy Term: 10/1/2022 – 10/1/2023 10/1/2023 – 10/1/2024 10/1/2023 – 10/1/2024 10/1/2023 – 10/1/2024Aggregate Limit: $2,000,000 $2,000,000 $2,000,000 $2,000,000Maximum Aggregate Retention: $100,000 $100,000** $100,000$250,000^ / $0 for Coalition Incident ResponseWaiting Period each BI Loss:10 Hours 10 Hours12 Hours8 HoursAdditional CoveragesForensic Accounting$50,000 $50,000Included at full limit subject to carrier approvalNot includedSocial Engineering$250,000 $250,000$100,000$250,000 Aggregate(includes Funds Transfer Fraud, Service Fraud)Funds Transfer FraudNot included Not included$100,000Included aboveCourt Attendance Costs$250,000 $250,000Not included $25,000Invoice Manipulation$250,000 $250,000$100,000$250,000CryptojackingNot included Not included$100,000Not includedCriminal Reward$50,000 $50,000Not included $25,000Solicitation Claims$50,000 $50,000Excluded ExcludedBodily Injury LiabilityNot included Not included Not includedNot included; carve back for mental anguish claimsBiometric Claims CoverageIncluded Included IncludedExcludedPre-Claim Mitigation $1,000,000 $1,000,000Included; subject to carrier approval$5,000ImpersonationNot included Not included Not included$250,000Total Annual Premium*$104,486*($52,243 per $1M)$75,577*($37,788 per $1M; -$28,909 or 28% decrease YOY)$80,000*($40,000 per $1M; -$24,486 or 23% decrease)$85,228*($42,614 per $1M; -$19,258 or 18% decrease YOY)*Premium subject to commission deletion; does not include applicable taxes and fees.**Retention can be decreased by 25% (up to $25,000) for certain insuring agreements upon completion of Corvus Dashboard Security Questionnaire modules^SIR may be reduced by $10K if MFA was in place for a claim arising out of business email compromise 6LOCKTON COMPANIES |Primary $2M Cyber Marketing SummaryExpiring Market ResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsCorvus (incumbent primary)Primary $2M$2M$104,486.00$52,243.00$100K SIRPrimary Renewal/New MarketsResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsCorvus (incumbent market)Quoted primary $2M ($100K SIR)$2M$75,577.00$37,788.50-27.67%$ (28,909.00)Corvus (incumbent market)Quoted primary $2M ($250K SIR)$2M$64,018.00$32,009.00-38.73%$ (40,468.00)CoalitionQuoted primary $2M ($250K SIR)$2M$85,228.00$42,614.00-18.43%$ (19,258.00)ResilienceQuoted primary $2M ($100K SIR) –Premium only $2M$80,000.00$40,000.00-23.43%$ (24,486.00)ResilienceQuoted primary $2M ($100K SIR) –Premium + EDGE service package$2M$95,094.00$47,547.00-8.99%$ (10,392.00)EDGE includes additional cybersecurity services and resourcesResilienceQuoted primary $2M ($250K SIR) –Premium only$2M$70,000.00$35,000.00-33.01%$ (34,486.00)ResilienceQuoted primary $2M ($250K SIR) –Premium + EDGE service package$2M$86,000.00$43,000.00-17.69%$ (18,486.00)EDGE includes additional cybersecurity services and resources*see p. 28-29 for more details on Resilience’s EDGE package and enhanced service offerings 7LOCKTON COMPANIES |Primary $3M, $5M Cyber Marketing SummaryExpiring Market ResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsCorvus (incumbent primary)Primary $2M$2M$104,486.00$52,243.00$100K SIRPrimary Renewal/New MarketsResponseLimitPremiumPPM% Change YOY$ Change (Premium) YOYCommentsCoalitionQuoted primary $3M ($250K SIR)$3M$115,999.00$38,666.33-25.99%$ 11,513.00 Resilience (Proposed)Quoted primary $3M ($100K SIR) –Premium only$3M$105,000.00$35,000.00-33.01%$ 514.00 Resilience (Proposed)Quoted primary $3M ($100K SIR) –Premium + EDGE service package$3M$115,972.00$38,657.33-26.00%$ 11,486.00EDGE includes additional cybersecurity services and resourcesStarrIndicated primary $3M ($250K SIR)$3M$120,000.00$40,000.00-23.43%$ 15,514.00 Crum & ForsterIndicated primary $3M ($250K SIR)$3M$125,000.00$41,667.00-20.24%$ 20,514.00 Expiring Market ResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsCorvus (incumbent primary)Primary $2M$2M$104,486.00$52,243.00$100K SIRPrimary Renewal/New MarketsResponseLimitPremiumPPM$ Change YOY$ Change (Premium) YOYCommentsCoalitionQuoted primary $5M ($100K SIR)$5M$165,000.00$33,000.00-36.83%$ 60,514.00Includes a complimentary tabletop exerciseCoalitionQuoted primary $5M ($250K SIR)$5M$162,481.00$32,496.20-37.80%$ 57,995.00 Crum & ForsterIndicated primary $5M ($250K SIR)$5M$170,000.00$34,000.00-35%$ 65,514.00 *see p. 28-29 for more details on Resilience’s EDGE package and enhanced service offerings 8LOCKTON COMPANIES |Cyber Excess Marketing SummaryMarket ResponseResponseLimitPremiumPPMCorvus (Proposed excess)Quoted $2M x $3M over Resilience$2M$50,000$25,000BowheadCONTINGENT INDICATION $2M x $3M over Resilience primary (subject to favorable responses to confirmation of encryption of data at rest and in transit, internal SOC monitoring, vulnerability scanning)$2M$66,000$33,000Crum & ForsterIndicated $1M x $2M over Corvus$1M$37,000$37,000Crum & ForsterIndicated $2M x $2M over Corvus$2M$74,000$37,000CoalitionInitial decline; have been asked to revisitBowheadDecline Corvus option - Cannot sit over Corvus formSompoDecline - municipalities are a restricted class; cannot sit over Corvus formStarrDecline - Cannot sit over Corvus or Resilience formsResilienceDecline Corvus option - Cannot sit over Corvus form 9LOCKTON COMPANIES |Cyber Marketing Summary - DeclinationsExpiring Market ResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsCorvus (incumbent primary)Primary $2M$2M$104,486.00$52,243.00$100K SIRPrimary Renewal/New MarketsResponseLimitPremiumPPM% Change YOY$ Change YOYCommentsArchNot likely to be competitiveCanopiusNot likely to be competitiveAscotDecline -municipalities are a restricted classAxisDecline -municipalities are a restricted classAWACDecline -municipalities are a restricted classBeazleyDecline -municipalities are a restricted classBowheadCannot compete with primary options; cannot sit over Corvus formCFCDecline -municipalities are a restricted classHartfordDecline -municipalities are a restricted classMosaicDecline -municipalities are a restricted classZurichDecline -municipalities are a restricted class*see p. 26-27 for more details on Resilience’s EDGE package and enhanced service offerings 10LOCKTON COMPANIES |Proposed Higher Limit Option – Premium Only$5MCorvus$2M x $3M Limit$50,000*$25,000 / 72%$3MResilience$3M Limit –Premium Only$105,000* $35,000$100K$100K Retention PPM / ILFPolicy Period: October 1, 2023 - October 1, 2024Limits of Liability:$5,000,000 Aggregate Limit$5,000,000 Privacy and Security Liability$5,000,000 Media Liability$5,000,000 Privacy Regulatory Defense, Awards and Fines$5,000,000 PCI DSS Fines & Costs$5,000,000 Business Income Loss – Security Failure (12 Hr. Waiting Period)$5,000,000 Business Income Loss – System Failure$2,000,000 Dependent Business Income Loss – Security Failure (12 Hr. Waiting Period)$2,000,000 Dependent Business Interruption – System Failure$5,000,000 Data Recovery$5,000,000 Cyber Extortion (Ransomware)$5,000,000 Data Breach Response and Crisis Management$5,000,000 Computer Hardware ReplacementRetention:$100,000Total Annual Premium:$155,000*$50,514 increase in premium spend YOY (48% increase in spend)-$21,243 in the price per $1M YOY (41% decrease in price per $1M of limit)*does not include applicable taxes and fees 11LOCKTON COMPANIES |Proposed Higher Limit Option – Premium + EDGE Service Package$5MCorvus$2M x $3M Limit$50,000*$25,000 / 65%$3MResilience$3M Limit + EDGE service package$115,972* $38,657.33$100K$100K Retention PPM / ILFPolicy Period: October 1, 2023 - October 1, 2024Limits of Liability:$5,000,000 Aggregate Limit$5,000,000 Privacy and Security Liability$5,000,000 Media Liability$5,000,000 Privacy Regulatory Defense, Awards and Fines$5,000,000 PCI DSS Fines & Costs$5,000,000 Business Income Loss – Security Failure (12 Hr. Waiting Period)$5,000,000 Business Income Loss – System Failure$2,000,000 Dependent Business Income Loss – Security Failure (12 Hr. Waiting Period)$2,000,000 Dependent Business Interruption – System Failure$5,000,000 Data Recovery$5,000,000 Cyber Extortion (Ransomware)$5,000,000 Data Breach Response and Crisis Management$5,000,000 Computer Hardware ReplacementRetention:$100,000Total Annual Premium:$165,972*$61,486 increase in premium spend YOY (59% increase in spend)-$19,049 in the price per $1M YOY (36% decrease in price per $1M of limit)*does not include applicable taxes and fees 28LOCKTON COMPANIES |Resilience – Essential v. EDGE Cyber PackageResilience have built out its in-house cybersecurity team to provide additional tools, resources and consultants for the City to access through its EDGE services package. This package, which requires additional costs, expands the capabilities the City has access to as a policyholder. 29LOCKTON COMPANIES |Resilience – Essential v. Edge Cyber Package 30LOCKTON COMPANIES |Lockton EDGE BenchmarkingPublic Administration Clients with Revenues of $100M - $250MThe City of Denton’s proposed total Cyber limits of $5M, when compared to public administration peers with revenues of $100M to $250M, matches the median of the range.$100,000$250,000$0$50,000$100,000$150,000$200,000$250,000$300,00025th to 50th percentile50th to 75th percentileAveragePeer criteria: NAICS codes: 92-Public Administration Revenue range: $100M to $250MCYBER: DISTRIBUTION OF RETENTIONSSource:Policy renewal analytics on Lockton's book Average: $193,182Median: $100,000City of Denton: $100,000The City of Denton’s Cyber retention, when compared to public administration peers with revenues of $100M to $250M, is in the low end of the range but matches the median.$2,500,000$5,000,000$0$1,000,000$2,000,000$3,000,000$4,000,000$5,000,000$6,000,00025th to 50th percentilePeer criteria: NAICS codes: 92-Public Administration Revenue range: $100M to $250MCYBER: DISTRIBUTION OF TOTAL LIMITSSource:Policy renewal analytics on Lockton's book Average: $4,272,727Median: $5,000,000City of Denton: $5,000,000 31LOCKTON COMPANIES |Lockton EDGE BenchmarkingPublic Administration Clients with Revenues of $100M - $250MThe City of Denton’s proposed primary layer price per million, when compared to public administration peers with revenues of $100M to $250M, is between the 50thand the 75thpercentiles.$17,628$40,209$0$5,000$10,000$15,000$20,000$25,000$30,000$35,000$40,000$45,00025th to 50th percentile50th to 75th percentileAveragePeer criteria: NAICS codes: 92-Public Administration Revenue range: $100M to $250MCYBER: BENCHMARK PRIMARY PRICE PER MILLIONSource:Policy renewal analytics on Lockton's book Average: $28,100Median: $24,305City of Denton: $35,000$17,628$40,209$0$5,000$10,000$15,000$20,000$25,000$30,000$35,000$40,000$45,00025th to 50th percentile50th to 75th percentileAveragePeer criteria: NAICS codes: 92-Public Administration Revenue range: $100M to $250MCYBER: BENCHMARK TOTAL PRICE PER MILLIONSource:Policy renewal analytics on Lockton's book Average: $27,971Median: $24,305City of Denton: $31,000The City of Denton’s proposed total layer price per million, when compared to public administration peers with revenues of $100M to $250M, is between the 50thand the 75thpercentiles. 32LOCKTON COMPANIES |CyberCube BenchmarkingCyberCube, a cyber risk analytics company Lockton partners with, provides cyber risk modeling by combining firmographic, security, and insurance data, CyberCube models risk to quantify the implications of cyber risk exposure. 33LOCKTON COMPANIES |CyberCube Benchmarking(Revenues $175M)Lockton Analytics powered by CyberCube combines City-specific data like revenue and industry to predict cyber losses that could happen to CoD in the next year.If CoD experiences a cyber loss, there is a:•90% chance it will be $3.6M or less•95% chance it will be $9.7M or less•99% chance it will be $33.6M or lessRisk-tolerant Lockton clients typically buy between the 85h–90thpercentile. Risk Adverse client typically buy between the 90th–99thpercentile. 34LOCKTON COMPANIES |Data Breach Financial ExposureThis peril’s loss distribution captures the umbrella of events dealing with the unauthorized movement or exposure of sensitive information. The losses include the various first party and third-party liability costs an entity may incur as a result. 35LOCKTON COMPANIES |Network Outage Financial ExposureThis peril’s loss distribution captures the umbrella of events focused on the partial or full loss of use of a system performing a critical business function. The losses include the various first party costs an entity may incur as a result. 36LOCKTON COMPANIES |Software Impairment (Ransomware) Financial ExposureThis peril’s loss distribution captures the umbrella of events driven by a malicious attack or error that compromises computer systems and residing data via an unauthorized function, such as a ransomware event. The losses include the various first party and third-party liability costs an entity may incur as a result.