Choose a cover limit that reflects realistic business interruption exposure and likely regulatory fines. This first sentence answers the question directly and sets the minimum action.
Choose one year's gross profit as a conservative starting point for many SMEs. Adjust higher if the firm relies on single suppliers or key customers. Use short scenario runs for short, medium and long outages rather than a single rule.
Keep excess where the annual premium drop equals or exceeds expected retained loss. Expected retained loss equals incident probability times mean retained cost. That formula is the practical test to accept higher retention.
If the insurer reduces premium only slightly between bands, do not raise excess further. The error most frequent is choosing the cheapest premium without modelling retained losses. A written band schedule prevents that mistake.
Three-step quick calculation
Step 1: Estimate one year's gross profit and add a plausible ICO fine amount. Use this total as the suggested minimum limit.
Step 2: Pick an incident probability for the sector and estimate mean retained loss. Multiply probability by mean loss to get expected retained loss.
Step 3: Compare annual premium saving from a higher excess with expected retained loss. Move excess higher only while saving equals or exceeds expected retained loss.
A clear spreadsheet makes these steps repeatable at renewal.
When to call your broker
Ask the broker for a written premium schedule for standard excess bands: £0, £1k, £5k, £10k, £25k, £50k. That schedule lets the firm compute break‑even precisely.
Request clear wording on whether excess applies to regulatory fines, business interruption and ransom. Confusion over wording causes disputes at claim time.
Do not treat voluntary and compulsory excess the same. Confirm which excess the insurer enforces and which the insured can choose.
Run the break‑even calc: worked examples
Apply simple numbers by sector to find where premium saving equals expected retained loss. Examples make the decision tangible and repeatable.
Retail worked example
Inputs: turnover £600,000; gross profit £240,000; incident probability 12% (2023); mean retained loss £25,000. Expected retained loss = 0.12 × £25,000 = £3,000.
If moving from £1,000 to £10,000 excess saves £900 annually, the saving is below expected retained loss. Break‑even appears near a £25,000 excess in this example.
Professional services example
Inputs: turnover £1,200,000; gross profit £600,000; incident probability 6% (2023); mean retained loss £45,000. Expected retained loss = 0.06 × £45,000 = £2,700.
If the premium drop at a £20,000 excess equals £3,000, the firm reaches break‑even. Check professional indemnity exposures before changing limits.
E‑commerce example
Inputs: turnover £900,000; gross profit £360,000; incident probability 18% (2023); mean retained loss £15,000. Expected retained loss = 0.18 × £15,000 = £2,700.
High frequency and lower mean loss push the break‑even point down. For e‑commerce, lower excess often reduces BI and chargeback risk.
Use the formula: expected retained loss = incident probability × mean retained loss. Example: 12% × £25,000 = £3,000 per year. When annual premium saving reaches this figure, the change is financially neutral.
A compact break‑even sheet saves time at renewal and should be used in the broker meeting. Create three columns: Excess band, Annual premium at band, Annual premium saving. Add inputs above the table for Turnover, Gross profit, Incident probability and Mean retained loss.
Finally compute Expected retained loss and flag bands where Annual premium saving ≥ Expected retained loss. Run two scenarios: single high impact and two medium events.
UK SME incident frequency & severity by sector
Annual incident frequency and typical severity vary widely by sector. Use sector bands rather than one single number to avoid false confidence.
Suggested frequency bands (2023):
- professional services 4–10%
- retail and hospitality 10–20%
- e‑commerce 12–25%
- construction 3–8%
These ranges reflect recent market surveys and insurer bulletins.
Typical first‑party cost bands (2023 insurer data):
- low impact £500–£5,000
- mid impact £5,000–£30,000
- high impact £30,000–£250,000 plus
Severity depends on data type, backups and BI exposure.
Frequency ranges and how to read them
A 10% annual frequency means one incident every ten years on average. Use that as a starting probability for the break‑even formula.
If the firm stores special category data, increase severity assumptions. Regulatory fines and legal costs often push a mid‑impact event into high‑impact territory.
Severity drivers and evidence sources
Severity rises with payroll interruption, loss of sales channels and ransom demands. NCSC guidance and insurer claims bulletins help set realistic severity figures. See the NCSC site for technical guidance: National Cyber Security Centre.
In the image below, the balance between limits and excess is clear.
Tax & accounting treatment of excess
In UK accounting, the excess is part of the loss and is recorded as an expense when the loss occurs. That reduces taxable profit in the period the claim happens.
For VAT‑registered firms, VAT on repairs and professional services used to fix the incident is reclaimable subject to normal VAT rules. Keep supplier invoices to support VAT recovery.
Plan cashflow for immediate excess payments at claim time. Firms often underrate the liquidity impact of a single large retained loss.
How excess affects profit and tax
The insurer pays net of excess, so the firm records the full loss and insurer recovery separately. This keeps profit and loss clear for audit.
Tax relief follows the timing of the expense. A claim in one accounting period affects that period's profit and tax bill.
Cashflow and renewal implications
Treat excess as an upfront cash exposure during the year. Maintain a liquidity buffer equal to expected retained loss times a plausible incident count.
As a rule, budget for a 90‑day cash buffer to meet excess payments and immediate response costs at renewal.
For accounting, present gross loss and insurer recovery as separate line items under FRS 102/UK GAAP or IAS/IFRS where applicable. Disclose timing differences that affect taxable profit. A short numeric example helps: if a cyber event costs £50,000 and excess is £10,000, record gross loss £50,000, insurer recoverable £40,000 and net expense £10,000 in that period.
Broker negotiation checklist & wording tips
Request specific premium‑vs‑excess numbers and insist on written confirmation of which covers the excess applies to. These items materially change net exposure.
The most frequent broker/insured error is assuming all covers behave the same. Confirm excess application to fines, BI, ransom and third‑party liability.
Scripted broker questions
Ask the broker to provide premiums for excess bands £0, £1k, £5k, £10k, £25k, £50k. Ask for absolute £ and percentage savings for each band. Written numbers prevent misunderstandings at claim time.
Confirm whether excess applies to regulatory fines, BI, ransom and third‑party liability. If yes, ask whether excess is compulsory or voluntary.
Sample clause to request
Request wording such as: "Notwithstanding any provision, the policy excess shall not apply to regulatory fines and penalties up to £[X] where cover is provided by this policy." Keep the clause specific and time‑limited.
Also request clarification on aggregation and retroactive date. Ambiguous aggregation can reduce recoveries sharply for multiple related incidents.
This advice does not apply if contract terms force minimum limits, if the firm uses captive insurance, or if regulators mandate specific cover levels for the business.
Distinguish compulsory excess from voluntary excess and SIRs. A Self‑Insured Retention usually stays with the insured until a claim is tendered and can affect defence costs.
Practical endorsements to request include waiver of excess for regulatory fines up to a set amount and separate excess treatment for business interruption or ransom. These endorsements materially affect effective risk transfer and premium optimisation.
When to self‑insure or accept high excess
Choose self‑insurance only when the firm can fund at least 1.5× the probable maximum retained loss. Run scenario modelling over three to five years to show net savings.
This works well in theory, but in practice many small firms underestimate low‑probability high‑impact events. Stress‑test scenarios before changing retention.
An anonymised case: a ten‑person London consultancy took a £25,000 excess to save £3,600 a year. A single ransomware event caused retained costs near £40,000 and used all reserves.
Practical thresholds for self‑insurance
Minimum criteria:
- liquid reserves ≥ 1.5× worst plausible retained loss
- documented incident response plan
- basic controls like MFA, backups and patching
Prefer self‑insurance only if break‑even savings recover within three to five years.
Real‑world pitfalls to avoid
Do not base the decision on average loss only. Low probability, high cost events need separate stress scenarios.
Confirm incident response contracts and claims handling arrangements even when raising retention or self‑insuring.
Example scenario for board papers: show premium vs excess for each band, expected retained loss and two stress cases (single high‑impact event and two medium events). Present numbers over a 3‑5 year horizon to support the recommendation.
Decision matrix & comparison table to choose bands
A clear table comparing turnover bands, incident probability, median retained loss, suggested minimum limit, break‑even excess and action helps non‑specialists decide quickly. Use turnover bands to pick starting figures and then run the break‑even calculation for chosen excess bands.
| Turnover band |
Incident probability (%/yr) |
Median retained loss (£) |
Suggested minimum limit (£) |
Likely break‑even excess (£) |
Recommended action |
| < £250k |
6–12 |
£3,000–£15,000 |
Gross profit + £25,000 |
£5,000–£15,000 |
Keep low excess or self‑insure small events |
| £250k–£1m |
8–16 |
£10,000–£30,000 |
Gross profit + £50,000 |
£10,000–£35,000 |
Model break‑even and negotiate endorsements |
| £1m–£5m |
4–12 |
£20,000–£75,000 |
Gross profit + £250,000 |
£25,000–£75,000 |
Prefer higher limits; accept excess only if reserves strong |
Use the simple sheet layout and formulas during the quote discussion with the broker. Copy into a spreadsheet and plug in the numbers.
Inputs example:
Turnover: 600000
Gross profit margin: 40%
Gross profit = Turnover × margin
Incident probability (annual): 0.12
Mean retained loss: 25000
Expected retained loss = probability × mean retained loss
Premium at current excess = 1200
Premium at proposed excess = 300
Annual premium saving = current premium − proposed premium
Decision rule: accept proposed excess if annual premium saving ≥ expected retained loss
Break‑even process
Break‑even steps
1. Estimate gross profit and plausible fines
2. Choose incident probability by sector
3. Compute expected retained loss
4. Get premium schedule for excess bands from broker
5. Accept higher excess only if annual saving ≥ expected retained loss
Frequently asked questions
What is the difference between deductible and excess?
Deductible and excess often mean the same thing in UK policies. They are the amounts the insured pays at each claim. Always check policy wording for any special definition.
How do ICO fines interact with excess?
Some policies apply excess to regulatory fines, others exclude fines from excess. Confirm policy wording and seek an endorsement removing excess for fines when possible.
Can VAT be reclaimed on incident costs?
Yes when the firm is VAT‑registered and costs relate to taxable activities. Keep supplier invoices and show relation to business activities when claiming input tax.
When does higher excess stop saving premium?
When insurer discounts plateau; many insurers show decreasing marginal savings beyond certain bands. Ask for a premium schedule to identify those plateaux.
Is it safe to self‑insure for cyber risk?
It is safe only if liquid reserves cover at least 1.5× the probable maximum retained loss. Run stress tests over three to five years to show net savings.
How should a small firm present these numbers to the broker?
Present turnover, gross profit, sector, cash reserves and preferred excess bands. Request written premium vs excess figures and any endorsement wording needed.
What to do next
Prepare the simple inputs: turnover, gross profit, sector, current premium and cash reserves. Ask the broker for the premium vs excess schedule in writing and use the break‑even sheet to decide.
Share results with the finance lead or accountant before renewing. One clear written comparison to the broker makes renewals faster.
If in doubt at renewal, present the broker with the completed break‑even sheet and request a written recommendation comparing at least three excess bands.
