---
title: "Cyber Insurance Renewal NZ: Check Your Fraud Cover First | NSP"
description: Fraud drives 44% of one NZ broker's cyber claims, and insurers are starting to ask about AI. Here is what to check before your cyber insurance renewal.
image: https://blog.nsp.co.nz/hubfs/Insurance%20policy%20office%20scene.png
---

[![NSP\_Logo](https://blog.nsp.co.nz/hs-fs/hubfs/NSP_Logo.webp?width=118&height=76&name=NSP_Logo.webp)](https://nsp.co.nz/)

- [Home](https://nsp.co.nz/)
- Solution
  
  ##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)

    - [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
    - [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
    - [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
    - [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
    - [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
    - [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
    - [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
    - [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
    - [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
    - [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
    - [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)

  ##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)

    - [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
    - [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
    - [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
    - [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
    - [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
    - [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
    - [Security](https://nsp.co.nz/modern-workplace/security/)

  ##### [Cloud](https://nsp.co.nz/cloud/)

    - [Managed Services](https://nsp.co.nz/cloud/managed-services/)
    - [Migration](https://nsp.co.nz/cloud/migration/)
    - [Storage](https://nsp.co.nz/cloud/storage/)
    - [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
    - [Security](https://nsp.co.nz/cloud/security/)

  ##### [Managed Services](https://nsp.co.nz/managed-services/)

    - [Managed IT](https://nsp.co.nz/cloud/managed-it/)
    - [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
    - [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
    - [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
    - [Managed Network](https://nsp.co.nz/managed-services/managed-network/)

  ##### [Network Performance](https://nsp.co.nz/network-performance/)

    - [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
    - [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
    - [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)

  ##### [Backup](https://nsp.co.nz/backup/)

    - [Data Backup](https://nsp.co.nz/backup/data-backup/)
    - [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
    - [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
    - [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
    - [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)

  ##### [Professional Services](https://nsp.co.nz/professional-services/)

    - [Services](https://nsp.co.nz/professional-services/services/)
    - [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
    - [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)

  ##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)

    - [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
    - [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
    - [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
    - [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
    - [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
    - [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
    - [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
    - [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
    - [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
    - [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
    - [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)

  ##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)

    - [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
    - [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
    - [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
    - [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
    - [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
    - [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
    - [Security](https://nsp.co.nz/modern-workplace/security/)

  ##### [Cloud](https://nsp.co.nz/cloud/)

    - [Managed Services](https://nsp.co.nz/cloud/managed-services/)
    - [Migration](https://nsp.co.nz/cloud/migration/)
    - [Storage](https://nsp.co.nz/cloud/storage/)
    - [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
    - [Security](https://nsp.co.nz/cloud/security/)

  ##### [Managed Services](https://nsp.co.nz/managed-services/)

    - [Managed IT](https://nsp.co.nz/cloud/managed-it/)
    - [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
    - [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
    - [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
    - [Managed Network](https://nsp.co.nz/managed-services/managed-network/)

  ##### [Network Performance](https://nsp.co.nz/network-performance/)

    - [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
    - [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
    - [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)

  ##### [Backup](https://nsp.co.nz/backup/)

    - [Data Backup](https://nsp.co.nz/backup/data-backup/)
    - [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
    - [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
    - [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
    - [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)

  ##### [Professional Services](https://nsp.co.nz/professional-services/)

    - [Services](https://nsp.co.nz/professional-services/services/)
    - [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
    - [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)
- [About us](https://nsp.co.nz/about-us/)
- Resources
  
    - [Blog](https://blog.nsp.co.nz/)
    - [Webinar](https://nsp.co.nz/webinar/)

    - [Blog](https://blog.nsp.co.nz/)
    - [Webinar](https://nsp.co.nz/webinar/)
- [Contact us](https://nsp.co.nz/contact-us/)

[0508 010 101](tel:0508%20010%20101)[hello@nsp.co.nz](mailto:hello@nsp.co.nz)

- Home
- Blogs
- Cyber Insurance Renewal NZ: Check Your Fraud...

### Cyber Insurance Renewal NZ: Check Your Fraud Cover First | NSP

![](https://blog.nsp.co.nz/hubfs/NSP_Logo_Primary%20logo_CMYK_1-2.png)

 NSP Marketing

 10 November 2026

 12 min 

Read

# Cyber Insurance Renewal NZ: Check Your Fraud Cover First

Businesses renewing cyber insurance in New Zealand this year are finding an easier conversation about price than they have had in some time. Aon classed the NZ cyber market as soft in the first quarter of 2026, with plenty of capacity and broader cover on offer, and Marsh has noted that premiums have levelled off.

The more useful conversation sits inside the policy wording.

On 9 November, broker Gallagher reported that business email compromise, phishing and payment fraud make up 44% of the cyber claims it is handling for New Zealand clients. Gallagher did not say which period those figures cover or how many claims sit behind them, so they are best read as an indication of where claims are coming from. That indication matches what the NCSC sees. Scams and fraud were the most common category of incident reported to the NCSC in the second quarter of 2026, with 348 reports out of 1,129 incidents.

That points to a practical question for any renewal. If the most likely loss starts with a payment request or a phishing email, does your policy respond to it, and could you show an insurer the controls it expects to see?

This post covers what the latest data says, where policy wordings differ, what to check before you sign, and our prediction for the next set of questions insurers will ask: AI.

## A Soft Market Still Comes With Conditions

Cheaper cover makes it tempting to treat renewal as a price exercise. Insurers' expectations have not softened in step with premiums. Marsh has cautioned that carriers still expect effective cybersecurity controls and that organisations without basic protections may find it harder to secure cover.

Howden's Pacific cyber leader, Jack Bassett, wrote in the firm's H1 2026 cyber report that cyber insurance has rarely been more affordable while cyber risk has rarely been more consequential, and that this disconnect will not last forever in the Australian and New Zealand market.

NSP's CISO Geordie Stewart said much the same to members of the Insurance Brokers Association of New Zealand (IBANZ) in April 2026. Multi-factor authentication now works as a baseline eligibility criterion. A business without it will struggle to get cover and, if cover is offered, will probably face a significant premium. Insurers expect MFA across email, remote access, VPN and every administrator account, and they check it at claim time as well as at application.

The Manage My Health breach shows how much a single optional control can matter. A criminal used credentials stolen with Lumma Stealer malware to reach the patient portal and take health information belonging to more than 99,000 patients. The Ministry of Health found the breach was largely preventable. MFA was available on the platform but was not mandatory for every user. The Privacy Commissioner later issued compliance notices to both Manage My Health and Health NZ under rule 5 of the Health Information Privacy Code.

A soft market gives businesses room to spend renewal time on controls and wording, and that is the better use of it.

## Where NZ Cyber Claims Are Coming From

Gallagher's breakdown splits the 44% into two parts. Business email compromise and phishing account for 23% of the attack types in its clients' claims, and payment and funds transfer fraud accounts for another 21%. Gallagher's chief broking officer, Mark Jones, said cyber incidents often begin with everyday interactions and processes, such as payment requests and phishing emails. He added that businesses can work out where they are exposed, strengthen their resilience and check whether their cover is adequate.

The NCSC data points the same way. Of the 1,129 incidents reported in the second quarter of 2026, scams and fraud made up 348. Reported direct financial losses for the quarter were $2.7 million, down 52% from the $5.6 million recorded in the first quarter. A lower loss total in one quarter does not change which types of incident are most common.

The wider 2025/26 picture is steady. Of the 369 incidents of potential national significance the NCSC handled, 162 were linked to criminal or financially motivated actors, an 18% rise on the previous year. Our post on [financially motivated attacks on NZ businesses](https://blog.nsp.co.nz/ncsc-2026-financially-motivated-attacks-nz-businesses) covers where that money goes.

The same shift shows up overseas. The World Economic Forum's Global Cybersecurity Outlook 2026 found that chief executives' top cyber concern had moved from ransomware to cyber-enabled fraud and phishing.

Taken together, the losses most likely to reach a New Zealand business arrive through an inbox or a payment request. Those are also the losses where policy wordings vary the most.

## Social Engineering Cover Varies Between Policies

Insurance Business NZ has reported that social engineering cover is treated differently across NZ cyber wordings. Some policies offer it only as an optional extension, with its own sublimit and conditions that require specific internal controls.

Take a business whose most likely loss is a fraudulent change to a supplier's bank details. If the policy covers that loss through an extension with a low sublimit, the protection is far smaller than the headline policy limit suggests. A headline limit can look generous while the limit that applies to this type of loss is much lower.

Insurers are also likely to look closely at verification steps when a social engineering claim arrives. Examples include a callback to a known number before a payment is changed, and dual sign-off on payments. If the wording makes those steps a condition, a business that cannot show it followed them may find the claim contested.

Our earlier post on [what a cyber insurance claim costs NZ businesses](https://blog.nsp.co.nz/what-cyber-insurance-claim-costs-nz-businesses-what-policy-wont-cover) explains how sublimits work. For renewal, the useful step is to ask your broker five things about social engineering and funds transfer fraud:

- Is the cover included in the policy, or offered as an extension?
- What is the sublimit, and how does it compare with the largest payment your business makes in a month?
- Which internal controls does the wording require?
- Does it respond to invoice redirection and changes to supplier bank details?
- What evidence would the insurer ask for after a claim?

## The Controls Behind a Fraud Claim

Five controls come up repeatedly when fraud losses are examined.

**Payment verification -** A written process for any new or changed bank details: a callback to a number you already hold, and a second person approving the change. The process only helps at claim time if you can show it was followed, so keep a simple dated record.

**MFA on email and administrator accounts -** Most payment fraud starts with access to a mailbox. Our post on [identity security beyond MFA](https://blog.nsp.co.nz/identity-security-beyond-mfa-nz-busines) explains why MFA is the starting point and what sits around it.

**Monitoring for account compromise -**  New forwarding rules, unusual sign-ins and changes to authentication methods are common signs that a mailbox has been taken over. Someone has to see them in time. That is the work NSP's [Managed Detection and Response service](https://go.nsp.co.nz/managed-detection-and-response-for-nz-smes) does continuously across Microsoft 365 identity, email and endpoints. Our post on [who is watching your cybersecurity](https://blog.nsp.co.nz/who-is-watching-your-cybersecurity-nz-mdr) explains the difference between having security tools and having monitoring.

**Staff awareness that reflects current phishing -** The NCSC's 2026 report warns that AI is already improving phishing, scams, deepfakes and social engineering, and Gallagher says AI is making phishing more convincing and easier to scale. Training that includes payment fraud scenarios and phone verification gives staff something specific to act on.

**Patching -** On 22 October the NCSC urged organisations to patch immediately against two critical PHP vulnerabilities that could let an attacker take full control of a website, web server or web service. Gallagher advised businesses that are unsure of their exposure to ask their IT provider or web host, and to check with third-party technology suppliers. It also noted that leaving a known critical vulnerability unpatched may bring harder questions at renewal and potentially at claim time, depending on the wording.

## Two More Questions for Your Broker

**Vendor breach -** In May 2026 a supply chain attack on Canvas, a US-owned cloud learning platform, affected more than 30 NZ tertiary institutions and schools. The Ministry of Education estimates between 110,000 and 120,000 students and staff had personal data stolen, and institutions lost essential services for several days. Ask whether your policy responds to a loss that starts at a third-party vendor.

**State-backed attacks -** Since March 2023, standalone cyber policies written under Lloyd's risk codes CY and CZ have been required to exclude losses from state-backed cyberattacks that significantly impair a state's ability to function or undermine its security capabilities. The NCSC attributes 23% of incidents of potential national significance to suspected state-sponsored actors, and its report flags links between state actors and criminal networks. Attribution is rarely clear at the time of a claim, so ask how your wording treats it and where the exclusion threshold sits.

## What We Predict Insurers Will Want Next: Evidence of AI Governance

This section is our prediction, and we want to be clear about what it rests on. We have not found published evidence that NZ underwriters ask about AI governance as a standard part of renewal today. What we have found are signals, from NZ regulators and from insurers overseas, that point in one direction.

**The signals**

- **NZ regulators -** On 15 October the Reserve Bank of New Zealand and the Financial Markets Authority set out supervisory expectations on cyber risk linked to frontier AI. They focus on increased cyber risk, governance and oversight, and third-party and concentration risk. The FMA's Louise Unger said boards and senior management need to know where AI is being used in their business, understand the risks it brings and be clear about who is accountable. The expectations apply to regulated financial entities and build on existing obligations, but they show where NZ supervisors are looking.
- **A major insurer -** Beazley's group head of cyber risks, Alessandro Lezzi, told The Insurer in April that cyber underwriters will need to adapt the questions they ask to assess AI-related controls and governance processes. He has also said AI risk assessments could become a core part of future cyber underwriting. In September Beazley confirmed affirmative AI cover in its cyber policies and launched new AI endorsements, and The Insurer reported that it sets no standard premium for them, pricing by a client's AI use and governance.
- **Wordings are moving -** GlobalData reports that more modern cyber policies cover AI-related risks with restrictions, while other types of policy have started adding explicit AI exclusions. Insurance Business NZ reported in September that incidents in which AI systems caused breaches have pushed insurers to reconsider how existing wording applies when an AI system is the cause of a loss.
- **Businesses may assume they are covered -** GlobalData's 2025 SME survey found 46.7% of businesses believe their existing policies would cover losses from an AI-related incident, and a November 2025 Delinea survey of more than 750 security leaders found 42% said their cyber policies specifically exclude AI misuse or liability. Both are global surveys, so they show direction only.

**Our four predictions**

1. **An inventory of AI tools and a named owner -** Expect questions about which AI tools the business uses, where, and who is accountable for them. This mirrors the board-level expectation the RBNZ and FMA described.
2. **A written AI use policy and evidence that staff have been trained on it -** Insurers already ask for documented evidence of controls such as MFA and patching. Applying the same evidence standard to AI is a short step.
3. **Questions about third-party AI -** Which suppliers use AI with your data, and what happens if one of them has an incident. The regulators' concern about third-party and concentration risk, and the Canvas incident, both point there.
4. **Closer attention to how your policy defines AI -** Expect brokers to ask whether AI-related losses are included, excluded or covered by an endorsement, and what the wording counts as AI.

If we are right, businesses that can answer these questions early will have an easier renewal. If we are wrong, they will still have a clear record of how AI is used in their business, which is worth having. The starting points are small: list the AI tools in use, write a one-page policy, brief staff on it, and ask your broker how the policy defines AI. Our post on [AI governance for NZ SMEs](https://blog.nsp.co.nz/ai-governance-new-zealand-sme) covers how to begin.

## A Renewal Preparation List

Before your broker sends the renewal questionnaire, work through these:

- Ask your broker for the social engineering and funds transfer fraud wording, including the sublimit and conditions.
- Write down your payment verification process for new or changed bank details, and keep evidence it is followed.
- Confirm MFA covers email, remote access, VPN and every administrator account, and list any exceptions.
- Ask your IT provider or web host which critical patches have been applied recently, including the PHP vulnerabilities.
- List the third-party vendors that hold your data and how you would find out if one of them was breached.
- Ask how your policy wording treats state-backed attacks.
- List the AI tools in use across the business, who owns each one, and whether a written AI use policy exists.
- Ask your broker how the policy defines AI, and whether AI-related losses are included, excluded or covered by an endorsement.
- Confirm who watches your environment outside business hours.
- Keep a dated record of all of the above so your answers on the application can be backed up.

## How NSP Can Help

NSP's [cyber insurance assessment](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/) compares your current controls with what NZ insurers ask for, documents the evidence, and gives you a priority list before you apply or renew. NSP's CISO Geordie Stewart presented on this topic to IBANZ members in April 2026, and our recap covers what insurers are looking for in [Cyber Insurance in 2026](https://blog.nsp.co.nz/cyber-insurance-2026).

For the monitoring side, NSP's [Managed Detection and Response service](https://go.nsp.co.nz/managed-detection-and-response-for-nz-smes) provides 24/7 monitoring of Microsoft 365 identity, email and endpoints, so someone is watching for the early signs of account compromise.

For AI, NSP's [Secure AI Accelerator](https://go.nsp.co.nz/secure-ai-accelerator) builds the AI governance records that questions like these would draw on, including an AI use policy, staff training records and data handling rules.

## Frequently Asked Questions

**What do cyber insurers ask at renewal in NZ?**

Insurers focus on whether effective security controls are in place and can be evidenced. MFA is the clearest example. NSP's CISO told IBANZ members in April 2026 that insurers expect it across email, remote access, VPN and administrator accounts, and verify it at claim time. For fraud losses, insurers are likely to examine verification steps such as callbacks to known numbers and dual sign-off on payments. Patching of known critical vulnerabilities can also come up.

**Is cyber insurance getting cheaper in New Zealand?**

Aon classed the NZ cyber market as soft in the first quarter of 2026, with abundant capacity and broader cover available, and Marsh has noted that premiums have levelled off. Marsh has also cautioned that carriers expect effective cybersecurity controls, and that organisations without basic protections may find it harder to secure cover.

**Does cyber insurance cover payment fraud and business email compromise in NZ?**

It depends on the wording. Social engineering cover is treated differently across NZ cyber policies, and some wordings offer it only as an optional extension with its own sublimit and conditions that require specific internal controls. Ask your broker for the exact wording, the sublimit and the conditions before you renew.

**What is social engineering cover?**

Social engineering cover responds to losses where a person is tricked into sending money or changing payment details, such as a fraudulent change to a supplier's bank account. Some policies include it, some offer it as an extension, and the limit that applies is often lower than the headline policy limit.

**Will NZ cyber insurers ask about AI governance?**

We expect so, but it is a prediction. We have not found published evidence that NZ underwriters ask about AI governance as a standard today. Signals point that way: the RBNZ and FMA expect boards of regulated financial entities to know where AI is used and who is accountable, and Beazley's head of cyber risks has said underwriters will need to adapt their questions to assess AI controls and governance. Listing your AI tools, writing a short AI use policy and training staff on it are sensible steps whichever way the market goes.

**What is a state-backed attack exclusion?**

Since March 2023, standalone cyber policies written under Lloyd's risk codes CY and CZ have been required to exclude losses from state-backed cyberattacks that significantly impair a state's ability to function or undermine its security capabilities. Because attribution is often unclear at the time of a claim, it is worth asking your broker how your wording applies the exclusion.

**What should I do before renewing my cyber insurance?**

Ask your broker about social engineering, third-party vendor breach, state-backed attack and AI wording. Confirm MFA covers every account insurers expect it to cover. Write down your payment verification process and keep a record that it is followed. Check recent patching with your IT provider, and confirm who monitors your environment outside business hours. Keep dated evidence of each so your answers on the application can be backed up.

## Preparing for Your Renewal?

A free 30-minute consultation with NSP covers which controls your insurer is likely to ask about, what evidence you can already show, and what would be worth fixing before the questionnaire arrives.

**[Book your free consultation](https://go.nsp.co.nz/cyber-insurance-assessment-nz)**

Or call us directly: **0508 010 101**

### Related Reading

- [Avoid Cyber Insurance Claim Denials in NZ in 2026](https://blog.nsp.co.nz/avoid-cyber-insurance-claim-denials-in-nz-in-2026)
- [The Cost of Getting Your Cyber Insurance Application Wrong](https://blog.nsp.co.nz/the-cost-of-getting-your-cyber-insurance-application-wrong-nsp-nz)
- [What a Cyber Insurance Claim Costs NZ Businesses](https://blog.nsp.co.nz/what-cyber-insurance-claim-costs-nz-businesses-what-policy-wont-cover)
- [The Security Baseline Every NZ Business Needs Before Buying Cyber Insurance](https://blog.nsp.co.nz/the-security-baseline-every-nz-business-needs-before-buying-cyber-insurance)
- [Financially Motivated Attacks on NZ Businesses Are Up 18%](https://blog.nsp.co.nz/ncsc-2026-financially-motivated-attacks-nz-businesses)
- [Who Is Watching Your Cybersecurity?](https://blog.nsp.co.nz/who-is-watching-your-cybersecurity-nz-mdr)
- [AI Governance for NZ SMEs](https://blog.nsp.co.nz/ai-governance-new-zealand-sme)
- [Cyber Insurance Assessments - NSP](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
- [Managed Detection and Response - NSP](https://go.nsp.co.nz/managed-detection-and-response-for-nz-smes)
- [Secure AI Accelerator - NSP](https://go.nsp.co.nz/secure-ai-accelerator)

[Book a complimentary consultation with our experts](https://go.nsp.co.nz/cyber-insurance-assessment-nz)

#### CATEGORY

- [Cybersecurity (104)](https://blog.nsp.co.nz/tag/cybersecurity)
- [Digital transformation (37)](https://blog.nsp.co.nz/tag/digital-transformation)
- [Managed services (34)](https://blog.nsp.co.nz/tag/managed-services)
- [Awareness and education (23)](https://blog.nsp.co.nz/tag/awareness-and-education)
- [Cloud (23)](https://blog.nsp.co.nz/tag/cloud)
- [AI (20)](https://blog.nsp.co.nz/tag/ai)
- [IT Risk (19)](https://blog.nsp.co.nz/tag/it-risk)
- [Breach (18)](https://blog.nsp.co.nz/tag/breach)
- [Managed Detection & Response (MDR) (12)](https://blog.nsp.co.nz/tag/managed-detection-response-mdr)
- [modern workplace (12)](https://blog.nsp.co.nz/tag/modern-workplace)
- [Collaboration (11)](https://blog.nsp.co.nz/tag/collaboration)
- [Cyber Smart Week (11)](https://blog.nsp.co.nz/tag/cyber-smart-week)
- [Business strategy (9)](https://blog.nsp.co.nz/tag/business-strategy)
- [Culture (9)](https://blog.nsp.co.nz/tag/culture)
- [microsoft (9)](https://blog.nsp.co.nz/tag/microsoft)
- [Backup (8)](https://blog.nsp.co.nz/tag/backup)
- [Remote Workers (8)](https://blog.nsp.co.nz/tag/remote-workers)
- [copilot (7)](https://blog.nsp.co.nz/tag/copilot)
- [Cyber Insurance (6)](https://blog.nsp.co.nz/tag/cyber-insurance)
- [Future of work (6)](https://blog.nsp.co.nz/tag/future-of-work)
- [network performance (6)](https://blog.nsp.co.nz/tag/network-performance)
- [Vulnerability Assessment (5)](https://blog.nsp.co.nz/tag/vulnerability-assessment)
- [vCISO (5)](https://blog.nsp.co.nz/tag/vciso)
- [Governance (4)](https://blog.nsp.co.nz/tag/governance)
- [Microsoft Teams (4)](https://blog.nsp.co.nz/tag/microsoft-teams)
- [0365 (3)](https://blog.nsp.co.nz/tag/0365)
- [IT budget (3)](https://blog.nsp.co.nz/tag/it-budget)
- [Legal Industry (3)](https://blog.nsp.co.nz/tag/legal-industry)
- [Best Practice (2)](https://blog.nsp.co.nz/tag/best-practice)
- [Construction Industry (2)](https://blog.nsp.co.nz/tag/construction-industry)
- [Penetration Testing (2)](https://blog.nsp.co.nz/tag/penetration-testing)
- [Tabletop Exercise (2)](https://blog.nsp.co.nz/tag/tabletop-exercise)
- [health IT consultant (2)](https://blog.nsp.co.nz/tag/health-it-consultant)
- [Healthcare (1)](https://blog.nsp.co.nz/tag/healthcare)

see all

#### RECENT POST

[![](https://blog.nsp.co.nz/hubfs/Insurance%20policy%20office%20scene.png)](https://blog.nsp.co.nz/cyber-insurance-renewal-nz-fraud-cover)

[Cyber Insurance Renewal NZ: Check Your Fraud Cover First | NSP](https://blog.nsp.co.nz/cyber-insurance-renewal-nz-fraud-cover)

 10 Nov 2026

[![](https://blog.nsp.co.nz/hubfs/After-hours%20financial%20office.png)](https://blog.nsp.co.nz/fma-72-hour-cyber-incident-notification-financial-advice-providers-nz)

[FMA 72-Hour Cyber Notification for FAPs | NSP](https://blog.nsp.co.nz/fma-72-hour-cyber-incident-notification-financial-advice-providers-nz)

 01 Nov 2026

[![](https://blog.nsp.co.nz/hubfs/Auckland%20Server%20Cabinet.png)](https://blog.nsp.co.nz/php2shell-php-vulnerability-nz-business-website)

[PHP2Shell: What NZ Businesses Need to Check | NSP](https://blog.nsp.co.nz/php2shell-php-vulnerability-nz-business-website)

 22 Oct 2026

[![](https://blog.nsp.co.nz/hubfs/NZ%20business%20owner%20at%20desk%20looking%20at%20security%20awareness%20training%20on%20laptop%20screen%2c%20representing%20the%20gap%20between%20cyber%20security%20awareness%20and%20consistent%20implementation%20for%20NZ%20SMEs.png)](https://blog.nsp.co.nz/ncsc-2026-basic-cyber-hygiene-nz-businesses-still-getting-hit)

[Basic Cyber Hygiene Works. Why Are NZ Businesses Still Hit?](https://blog.nsp.co.nz/ncsc-2026-basic-cyber-hygiene-nz-businesses-still-getting-hit)

 18 Oct 2026

### Let’s stay in touch!

Enter your details below to stay up-to-date with the latest IT solutions and security measures.

[![NSP\_Logo\_footer](https://blog.nsp.co.nz/hs-fs/hubfs/NSP%20assets%202024/Images/NSP_Logo_footer.png?width=170&height=85&name=NSP_Logo_footer.png)](https://nsp.co.nz/)

A trusted technology partner for NZ SMEs. Building secure, scalable technology solutions for more than 20 years

##### Useful Links

- [About us](https://nsp.co.nz/about-us/)
- [Procurement](https://savvi.net.nz/)
- [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Managed Services](https://nsp.co.nz/managed-services/)
- [Cloud](https://nsp.co.nz/cloud/)
- [Contact us](https://nsp.co.nz/contact-us/)

##### Contact

Unit 1, 13 Farnham Street Parnell, Auckland 1052, NZ

- [0508 010 101](tele:0508%20010%20101)
- [info@nsp.co.nz](mailto:info@nsp.co.nz)

- <https://www.linkedin.com/company/network-service-providers-nsp-/>
- <https://vimeo.com/nspnz>
- <https://www.facebook.com/NetworkServiceProviders/>

Copyright © 2026 NSP - All rights reserved

- [Terms & Conditions](https://blog.nsp.co.nz/hubfs/NSP%20Terms%20and%20conditions/NSP%20Terms%20%26%20Conditions%202021.pdf)
- [Privacy Policy](https://nsp.co.nz/privacy-policy/)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "NSP Marketing",
    "url" : "https://blog.nsp.co.nz/author/nsp-marketing"
  },
  "dateModified" : "2026-11-10T00:33:54.789Z",
  "datePublished" : "2026-11-10T00:33:54.000Z",
  "headline" : "Cyber Insurance Renewal NZ: Check Your Fraud Cover First | NSP",
  "image" : [ "https://blog.nsp.co.nz/hubfs/Insurance%20policy%20office%20scene.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://blog.nsp.co.nz/cyber-insurance-renewal-nz-fraud-cover",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.nsp.co.nz/hubfs/NSP_Logo_Primary%20logo_CMYK_1.png"
    },
    "name" : "Network Service Providers Ltd"
  }
}
```