Cyberverzekering in 2025 noodzakelijke bescherming
Finass Verzekert vergelijkt onafhankelijk de autoverzekering voor gecombineerd zakelijk en privé gebruik. Wij vergelijken meerdere verzekeraars. AFM-geregistreerd en Kifid-aangesloten.
Zakelijk en privé in één auto
Gebruikt u uw auto zowel zakelijk als privé? Dan is het belangrijk dat uw dekking daarop aansluit — zodat u in beide situaties goed verzekerd bent.
Wij stemmen de dekking af op uw gebruik en kilometrage, en adviseren over WA, WA + Beperkt Casco of Allrisk. Rijdt u met een bestelauto? Dan verzekert u de lading apart met een eigen vervoerverzekering.
Bekijk de verzekeringen
In 1 minuut uitgelegd
Bekijk in deze korte video waar u op moet letten en welke keuzes bij uw situatie passen.
Liever direct sparren? Neem contact op — wij kijken persoonlijk met u mee.
Waarom uw autoverzekering afsluiten via Finass Verzekert?
Als onafhankelijk adviseur vergelijken wij meer dan 30 Nederlandse verzekeraars en kijken we met u mee — geen vergelijkingssite, maar een echte adviseur.
- meerdere verzekeraarsBrede vergelijking voor de beste premie
- Binnen 2 minutenPremie berekend op basis van kenteken
- 100% onafhankelijkGeen voorkeur voor verzekeraars
- Persoonlijk adviesBereikbaar 6 dagen per week
Wat onze klanten zeggen over hun autoverzekering
Klanten beoordelen Finass Verzekert gemiddeld met een 9,5 en de afhandeling van autoschade met een 9,8.
“Binnen een dag overgestapt en €230 per jaar goedkoper. Fijn dat een echte adviseur meekeek in plaats van alleen een vergelijkingssite.”
“Ik twijfelde tussen WA+ en Allrisk. Het advies was helder en eerlijk, afgestemd op de waarde van mijn auto.”
“Als starter betaalde ik overal veel. Hier kreeg ik onafhankelijk advies over de voordeligste verzekeraar voor mijn situatie.”
“Na een aanrijding meteen geholpen en de schade snel afgewikkeld. Prettig dat je een vast aanspreekpunt hebt.”
Al verzekerd en schade?
Meld uw schade direct, of zoek de polisvoorwaarden en formulieren van uw verzekeraar. Bij schade belt u ons het snelst op 072 - 509 24 56.
Acceptance requirements · supply chain risk · supervision
Cyber insurance in 2025: from option to necessity
In recent years cyber insurance has changed from an optional extra into a policy with entry requirements. Anyone who does not meet those requirements no longer gets a quote.
- Several insurers compared objectively
- 9.5 customer rating for a new policy
- AFM licence 12016589
- Personal 072 - 509 24 56, weekdays 9–17
Deze pagina in het Nederlands: Cyberverzekering in 2025: van optie naar noodzaak.
The calculator and the quote form below are in Dutch. Prefer to do this in English? Email info@finassverzekert.nl or call 072 - 509 24 56 and we will take it from there.
Work out your own premium with the calculator.
Enter your details; you will receive a proposal within one working day.
- We compare the offerings of several insurers
- An adviser checks whether the cover suits your activities
- We arrange the switch, including cancellation
A premium indication, not personal advice. Prefer to talk it through? Call 072 - 509 24 56.
In brief
The market has become stricter in recent years. Where a cyber policy used to be arranged on the basis of a short questionnaire, insurers now assess measures: multi-factor authentication on all access from outside, back-ups kept separate from the network and demonstrably restored, a patching process with a deadline, restrictions on administrator rights and detection on workstations. An organisation that does not meet these does not get cover but a refusal or an exclusion for the part that is not in order. What the policy covers is set out on the hub page cyber insurance.
The reason for that tightening lies in the claims picture. Attacks are aimed less at stealing data and more at bringing processes to a halt: encrypted systems, an order line that is not running, a schedule that has disappeared. The risk is also shifting towards the chain. Organisations outsource their administration, hosting and software management, so that one incident at a service provider hits dozens of customers at once. Your own network may then be untouched while your turnover stops; whether that is included is not in the brochure but in the policy conditions.
Supervision is changing as well. The European NIS2 directive is being implemented in the Netherlands in the Cyberbeveiligingswet (the Dutch cyber security act) and imposes a duty of care and a duty to report on organisations in designated sectors, with responsibility reaching up to board level. For personal data the duty to report already applied under Article 33 of the GDPR, with a report to the regulator in principle within 72 hours, and Article 34 for informing those concerned where there is a high risk. Insurance does not take over those obligations; it does mean that lawyers and investigators are available immediately who know what has to happen within those 72 hours.
This page deals with one situation. The full overview is on Compare business cyber insurance.
What to look out for
Four developments that determine how an application is assessed today.
The questionnaire has become binding
Answers about authentication, back-ups and updates are part of the contract. If the answer does not match reality at the time of application, that engages Article 7:928 of the Dutch Civil Code on the duty of disclosure and Article 7:930 of the Dutch Civil Code on its consequences. Do not have the list filled in by the board on the basis of impressions, but by the person who manages the network, and keep the supporting evidence with the policy file.
Business interruption weighs more heavily than data breaches
The largest item of loss is usually not a fine or a claim, but turnover that falls away during recovery. So look at the waiting period before compensation starts, at the maximum indemnity period and at whether additional costs of continuing to work are included. Work out what a week of downtime means before you look at the premium; that sum determines what cover you need.
What no cyber policy solves
What remains uninsurable is administrative fines and penalty payments, damage caused by acts of war and attacks attributed to state actors, the costs of overdue maintenance on outdated systems that you should have replaced anyway, and loss of customers or market value. An incident that was already running before the start date also falls outside the cover; that is why insurers ask about known vulnerabilities and earlier incidents.
The boundary with other policies
An error in software you built for a customer is a professional error and belongs on a professional indemnity insurance. Injury or damage to property suffered by third parties belongs on the public and employers' liability insurance. Personal complaints against directors after an incident may end up on a directors' and officers' liability insurance . Three policies that touch on each other; record which one is primary.
What does your premium depend on?
- Turnover and number of workstations — the usual measure of the size of the risk
- Type of data — payment and health data increase the risk
- Maturity of the security — authentication, back-ups, detection and rights management
- Outsourcing and supply chain dependence — how many processes run at external parties
- Ability to recover — whether a restored back-up has demonstrably been tested
- Earlier incidents — reports and attacks in recent years
Insurers weigh these details differently. That is why comparing pays off.
What is covered
| Situation | Basic | Extended |
|---|---|---|
| Forensic investigation and the report to the Autoriteit Persoonsgegevens (the Dutch data protection authority) | Yes | Yes |
| Restoring and rebuilding encrypted systems after a ransomware attack | Yes | Yes |
| Turnover lost on the days your order line is at a standstill | Provided that | Yes |
| An invoice your accounts department paid after a forged email from the director | No | Provided that |
| An outage at your hosting provider while your own network was untouched | No | Provided that |
| A fine from the regulator after the data breach has been investigated | No | No |
The most expensive item is usually the interruption, and that is precisely what appears as a separate section with its own waiting period in the policy.
Frequently asked questions
The questions we are asked most often about this.
Is cyber insurance compulsory?
No, there is no statutory duty to insure. Legislation and, increasingly, clients do impose obligations around security, reporting and demonstrable ability to recover. Tenders and framework contracts now regularly require cyber cover as a condition of award. The practical need follows from your dependence on systems, not from a rule.
We have everything in the cloud. Does our risk then lie with the supplier?
Partly. Your supplier is responsible for his infrastructure, but you remain responsible for access management, user rights and the data itself. The contractual liability of cloud services is, moreover, often tightly capped. If the service fails, you carry the interruption while there is technically nothing you can do; so look expressly at the cover for failure of an external service provider.
What should I do in the first hours after an incident?
Call the emergency number on the policy before you wipe or reinstall systems yourself; doing so destroys traces needed for the investigation and for the report. Isolate affected systems, leave the back-ups alone and record times. Reporting should be done as soon as reasonably possible, as Article 7:941 of the Dutch Civil Code requires, and the GDPR report runs to its own deadline alongside that.
Will we get cover if our systems are outdated?
Often not, or only with an exclusion for those systems. Software that no longer receives security updates is, to insurers, a known and manageable risk that belongs with you. Take stock of which components are out of support and plan their replacement before you apply; that is usually cheaper than the loading or the excess that would otherwise be set against it.