2023-041-E-IT Dept-RecTrac-Parks and Rec

Browse Search

TCM-POL-001 (01/19) Page 2 of 16 With respect to each Insuring Agreement stated above, the amount that the Insurer is obligated to pay is limited based on the applicable Limit of Liability as described in Section VI., Limits of Liability. In addition, in connection with any Cyber Event that results in Breach Costs or First Party Loss that exceeds the Deductible,the Insurer will also provide Supplemental Payments & Services which shall be part of, and not in addition to, the Aggregate Limit of Liability specified in Item 4. of the Declarations. II. DEFENSE AND SETTLEMENT OF CLAIMS A. Defense of Claims: The Insurer shall have the right and duty to defend, subject to all the provisions, terms and conditions of this Policy, any Claim made against an Insured seeking Damages which are payable under the terms of this Policy, even if any of the allegations of the Claim are groundless, false or fraudulent. Defense counsel shall be mutually agreed between the Named Insured and the Insurer, provided that in the absence of such agreement, the Insurer’s decision will be final. B. Settlement of Claims: The Insurer may not settle any Claim without the written authorization of the Named Insured. If the Named Insured refuses to consent to any settlement or compromise recommended by the Insurer and acceptable to the claimant and elects to contest the Claim , then the Insurer will have the right to withdraw from the further defense of such Claim and the Insurer’s liability for Damages and Claims Expenses shall not exceed: 1. the amount for which the Claim could have been settled, less the remaining Deductible, plus the Claims Expenses incurred up to the time of such refusal; plus 50% of any Claims Expenses incurred after the date such settlement or compromise was recommended to the Insured plus 50% of any Damages above the amount for which the Claim could have been settled. The remaining 50% of such Claims Expenses and Damages must be borne by the Insured at their own risk and uninsured; or 2. the applicable Limit of Liability, whichever is less. The Insured may settle any Claim where the Damages and Claims Expenses do not exceed the Deductible, provided that the entire Claim is resolved and the Insured obtains a full release on behalf of all the Insureds and the Insurer from all claimants. III. DEFINITIONS A.Breach Costs means the following reasonable and necessary expenses incurred by the Insured Entity with respect to a Cyber Event and with the prior written consent of the Insurer, provided that if services are recommended by the Crum & Forster Cyber Response Team shown in Item 11. of the Declarations, and the Named Insured agrees to utilize the applicable vendors nominated by the Crum & Forster Cyber Response Team, then prior consent of the Insurer shall not be required: 1. for an attorney to provide necessary legal advice to the Insured Entity to evaluate the Insured Entity’s legal obligations in connection with an actual or reasonably suspected Cyber Event; 2. for a computer security expert, or experts, to determine the existence, cause and scope of a Cyber Event as well as the costs to contain an ongoing Cyber Event, including the cost to retain a PCI Forensic Investigator if required by a written agreement between the Insured Entity and a financial institution, credit or debit card company, credit or debit card processor, merchant bank or any other entity offering or providing merchant card transaction processing or payment gateway services to the Insured Entity ; 3. to notify individuals or entities whose Protected Information was potentially impacted by a Cyber Event. This shall include costs incurred by the Insured Entity to directly notify individuals on behalf of a third party that has the legal obligation to notify such individuals, provided that such third party agrees to allow the Insured Entity to notify such individuals on their behalf; 4. for a call center to respond to inquiries from individuals that the Insured Entity has notified because their Protected Information was potentially impacted by a Cyber Event; 5. to provide a credit monitoring or identity monitoring product to individuals that the Insured Entity has notified because their Protected Information was potentially impacted by a Cyber Event. Such credit monitoring or identity monitoring product will be provided for a period of 12 months unless the Insured Entity is required by law or regulation to provide such a credit monitoring or identity monitoring product for a longer period of time. DocuSign Envelope ID: 028D978E-DF71-4D79-863D-8360D7144DD8