Most cyber insurance policies were written for attacks that don’t happen anymore. Attackers targeted your perimeter. They tried to breach your data. They deployed ransomware against your infrastructure. Cyber policies were built to respond to those scenarios. But the threat landscape has fundamentally shifted. Attackers now exploit AI vulnerabilities, compromise your vendors, and use social engineering to trigger voluntary transfers. The policies haven’t kept pace.

AI Is Rarely Named Explicitly In Policy Language

AI has become a primary attack vector. Model manipulation, prompt injection, data poisoning, deepfake fraud. These are real threats that organizations face today.

But most cyber policies don’t explicitly reference AI. Cover for these threats is inferred, not guaranteed. The NIST AI Risk Management Framework provides a comprehensive approach to managing AI risks, but most cyber policies predate this framework and don’t incorporate its recommendations.

A policy might cover “fraud” or “unauthorized access,” but it doesn’t explicitly state whether that covers AI-generated deepfakes or model poisoning attacks. The OWASP Top 10 for Large Language Model Applications identifies specific LLM vulnerabilities that organizations should protect against, yet standard cyber policies remain silent on these threats.

This creates ambiguity. When an organization experiences an AI-enabled attack and files a claim, the insurance company can argue: this threat wasn’t contemplated in the policy language. Cover is disputed. The organization absorbs the gap.

Explicit coverage for AI-specific threats is beginning to appear in new policy wordings. But most organizations are still operating under older language that treats AI threats as variations of traditional fraud or system compromise, rather than as distinct attack vectors.

Supply Chain Risk Sits In Contingent BI—And It’s Sub-Limited

The most common attack path today isn’t through the insured’s own perimeter. It’s through a vendor or SaaS provider. Attackers compromise a less-secure supplier. The insured’s operations stall because they depend on that supplier’s service.

The CISA Securing the Software Supply Chain guidance outlines best practices for managing supply chain risk, but most cyber policies don’t adequately cover the financial impact when a vendor is compromised.

This is contingent business interruption exposure. It’s covered under most cyber policies—but typically as a sub-limit well below the main aggregate. An organization with $10 million in cyber coverage might have only $1 million in contingent BI sub-limits.

For an organization losing $500,000 daily when a critical vendor goes offline, a $1 million sub-limit covers two days of losses. The remaining exposure is uninsured.

Additionally, contingent BI coverage often requires proof that the vendor’s outage directly caused a demonstrable loss. Establishing that causal chain takes time. By the time the claim is approved, the organization has already absorbed months of recovery costs.

Social Engineering Cover Is Scattered Across Cyber And Crime Wordings

Social engineering attacks result in voluntary transfers. An employee believes they’re following legitimate instructions from an executive. The money moves to an attacker. The system worked correctly. But the loss is real.

This loss sits between cyber insurance and crime insurance. Neither policy owns it cleanly. Cyber insurance covers system breaches, not voluntary transfers. Crime insurance covers theft, but often excludes “voluntary parting”—situations where the victim willingly transferred money because they were deceived.

Social engineering fraud (SEF) coverage attempts to bridge this gap. But SEF is placed inconsistently across cyber and crime wordings. Some organizations have it under cyber. Some under crime. Some under both, but with different sub-limits and exclusions.

When a social engineering attack occurs, the claim gets disputed. Is this cyber? Is this crime? Does the voluntary parting exclusion apply? By the time the coverage question is resolved, the organization has already spent months without recovery.

Regulators Are Expanding AI Enforcement

Regulators in the UK, EU, and APAC are expanding enforcement around AI governance, model integrity, and data security. When an organization experiences an AI-enabled attack or discovers model poisoning in their systems, regulators open investigations.

The HKMA Supervisory Approach on Cyber Risk Management and HKMA Technology Risk Management Guidelines set expectations for Hong Kong institutions. In Singapore, the MAS Cyber and Technology Resilience Experts Panel and the MAS AI-Driven Cyber and Technology Risk Taskforce are actively working to strengthen defenses against AI-enabled threats.

The EU AI Act and AI Act Explorer set a comprehensive regulatory framework. The FCA’s AI governance expectations in the UK emphasize governance and operational resilience.

These investigations trigger notification requirements, defense costs, and compliance obligations. Traditional cyber policies address notification costs for data breaches. They don’t explicitly address notification for AI governance failures or model compromise incidents.

As regulatory enforcement expands, organizations are facing investigation costs that their cyber insurance doesn’t contemplate. The gap between actual exposure and insured exposure widens.

The Three Gaps Show Up In Almost Every Mid-Market Programme

When Continuum reviews cyber insurance programmes for mid-market and fintech organizations, three gaps consistently appear:

First, AI threats are inferred, not explicit. Cover for model manipulation, prompt injection, or deepfake fraud depends on how broadly the policy interprets “fraud” or “cyber attack.” That ambiguity creates claims disputes.

Second, supply chain risk is sub-limited. Contingent BI coverage exists but is capped well below the organization’s actual exposure to vendor outages. The most likely attack path is under-insured.

Third, social engineering sits in a grey zone. Whether the claim is covered depends on how cyber and crime policies interact, how SEF sub-limits are structured, and whether voluntary parting exclusions apply. The coverage landscape is unclear.

A Defensible Cyber Programme Aligns Wordings Across Cyber, Crime, And PI

Organizations need cyber insurance that explicitly addresses AI threats. They need contingent BI sub-limits that reflect their actual vendor dependencies. They need clear coverage for social engineering fraud without voluntary parting exclusions.

Most importantly, they need alignment. Cyber, crime, and professional indemnity policies should work together to close gaps, not create them. When a loss occurs, the organization should know which policy responds—not spend months disputing coverage.

This requires reviewing wordings against the current threat environment, not the environment they were drafted for. Most cyber programmes were built three to five years ago. The threat landscape has evolved. The policies haven’t.

Understanding Your Coverage Against Today’s Threats

Before renewing cyber insurance, organizations should ask:

Does the policy explicitly cover AI-specific threats? Or does cover depend on broad interpretations of “fraud” and “system compromise”?

What are the contingent BI sub-limits? Are they adequate for a multi-day vendor outage? Or do they cover only a fraction of your actual exposure?

How is social engineering covered? Is it under cyber, crime, or SEF? Are there voluntary parting exclusions? What are the sub-limits?

How do your cyber, crime, and PI policies interact? Do they work together to close coverage gaps, or do they create overlaps and exclusions?

Most organizations can’t answer these questions. They renew based on premium, not on whether the coverage aligns with their actual threat environment.

Continuum Helps Close The Gaps

Cyber policies need to evolve. The Insurance Information Institute’s latest cyber insurance market analysis shows the market is growing, but coverage gaps persist. Until policies evolve, organizations need to understand where their coverage falls short and what gaps exist between their actual cyber risk and their insured exposure.

Continuum reviews cyber, crime, and PI policies against the threat environment organizations actually face today. We identify where AI threats are under-covered, where supply chain risk is sub-limited, and where social engineering sits in a grey zone. We help organizations align their wordings to close those gaps before a loss occurs.

Before renewing cyber insurance, understand what your policies actually cover—and what they don’t. Contact Continuum to review your coverage against the current threat landscape.

Most companies buy cyber insurance thinking it pays for data breach recovery. The policy indemnity matters, but it’s not the most valuable part. The real emergency services sit elsewhere: the incident response coordinators on retainer the moment you call, the forensics team ready to mobilize within hours, the legal counsel advising on notification timelines before regulators contact you. Understanding what cyber insurance actually covers reveals why the emergency response framework is what separates recovery from catastrophe.

The Emergency Services Inside a Cyber Policy

What cyber insurance actually covers: the incident response and forensics services that matter most when an attack lands.

Most companies buy cyber insurance thinking it pays for data breach recovery. The policy indemnity matters, but it’s not the most valuable part. The real emergency services sit elsewhere: the incident response coordinators on retainer the moment you call, the forensics team ready to mobilize within hours, the legal counsel advising on notification timelines before regulators contact you. Understanding what cyber insurance actually covers reveals why the emergency response framework is what separates recovery from catastrophe.

What Cyber Insurance Really Covers

Cyber insurance is often positioned as data breach protection—coverage that reimburses you after a breach occurs. This is technically true but profoundly incomplete. Modern cyber policies include a vendor panel of emergency services deployed the moment a cyber incident is discovered.

The distinction matters because the first 24-48 hours after a cyber attack determine the outcome. Early containment prevents data exfiltration. Rapid forensics identifies what actually happened. Immediate legal counsel prevents regulatory penalties. By the time indemnity becomes relevant, the emergency response has already determined whether you recover or collapse.

Most companies undervalue this because they assume emergency response is something they’ll figure out after a breach. It’s not. Cyber insurance policies pre-contract these services so they’re available immediately.

Incident Response Coordinators On Retainer

The first call after discovering a cyber attack connects you to an incident response coordinator already on retainer with your insurer. These coordinators don’t get appointed after the loss—they’re part of the vendor panel, retained 24/7 by the insurer specifically for this moment.

The coordinator mobilizes the forensics team, legal counsel, and communication specialists within hours. They establish a war room, coordinate containment, and manage the investigation timeline. Without this structure, companies waste critical hours figuring out who to call and in what order. With it, the response begins immediately.

The value isn’t just speed. Incident response coordinators have worked hundreds of breaches. They know which steps prevent further damage, which steps trigger regulatory reporting, and how to sequence decisions to minimize exposure. This expertise is included in your premium.

Digital Forensics: Identifying What Actually Happened

The forensics team determines scope: what data was accessed, whether it left the environment, what systems were compromised. This investigation is expensive—often costing $200,000 to $500,000 depending on infrastructure complexity and investigation depth.

Cyber insurance covers this cost entirely. Without insurance, companies pay forensics out of pocket while also absorbing the breach damage. With insurance, the forensics team works for your benefit before damage assessment even begins.

The forensics report becomes the foundation for everything that follows: customer notification decisions, regulatory reporting, insurance claims, and civil litigation defense. Getting this right in the first week determines your liability exposure for months afterward.

Ransomware Negotiation and Containment

When ransomware locks your systems, attackers demand payment. Cyber insurance policies include access to ransomware specialists who negotiate with threat actors, assess payment options, and handle logistics where legally permitted.

This service exists because ransomware negotiation is a specialized skill. Paying the wrong amount, paying the wrong threat actor, or triggering law enforcement issues—these mistakes compound the damage. Specialists navigate this landscape while legal counsel assesses what’s permissible under sanctions law and regulatory guidance.

Containment happens in parallel. The incident response team isolates affected systems, prevents lateral movement, and secures the network perimeter. This technical work prevents the attack from spreading while negotiation specialists work the financial side.

Legal Counsel for Regulatory Notification

Data protection regulations across Europe, Asia, and North America impose notification requirements with strict timelines. GDPR requires notification within 72 hours. Singapore’s PDPA and Hong Kong’s PCPD have similar windows. Missing these deadlines triggers regulatory fines on top of the breach damage.

Cyber insurance includes legal counsel specialized in breach notification. They advise on what counts as a reportable breach, who must be notified, and what notifications must say. They liaise with regulators if required. They draft customer communications that satisfy legal requirements without admitting unnecessary liability.

This counsel is critical because notification language directly affects downstream litigation. A poorly worded customer notification can trigger class actions. Well-crafted notification limits exposure while meeting regulatory obligations.

Business Interruption Coverage: Lost Profit During Outages

When ransomware or a destructive attack takes systems offline, your business loses revenue. Retail businesses lose sales. SaaS companies lose platform access. Supply chain companies lose processing capacity. These losses can exceed breach indemnity.

Cyber insurance business interruption coverage funds lost profit during the downtime—subject to a waiting period (typically 24-48 hours) and a maximum duration. For a company losing $500,000 daily in revenue during a week-long outage, this coverage means the difference between managing the impact and facing bankruptcy.

This coverage only works if systems are restored quickly. Incident response coordination, forensics speed, and containment effectiveness all determine how long the waiting period extends. This is why the emergency response vendor panel matters more than the indemnity amount.

Why the Vendor Panel Matters More Than the Payout

Most companies focus on the indemnity limit when buying cyber insurance. How much will the policy pay? This is the wrong question. The right question is: who will respond immediately and how fast?

A $5 million cyber policy with a slow claims process and no retained incident response vendors leaves you funding your own forensics, your own legal counsel, and your own containment while waiting for indemnity reimbursement months later. A $2 million policy with a retained incident response vendor panel, on-call forensics teams, and pre-contracted legal counsel gets you moving within hours.

The speed of the response determines the cost of the breach. The cost of the breach determines whether insurance indemnity is sufficient. This is why the vendor panel and response speed matter more than the policy limit.

Understanding Your Emergency Services Coverage

Before a cyber incident occurs, companies should review their cyber policy for what’s actually included in the emergency response services:

First, what’s on retainer? Are incident response coordinators retained 24/7 or appointed after a breach? The difference is hours of containment opportunity.

Second, what’s covered? Are forensics fully covered or is there a sub-limit? Is legal counsel for regulatory notification included? Is ransomware negotiation guidance included? Are breach notification costs covered?

Third, who’s on the vendor panel? Which forensics firm? Which legal counsel? Which incident response coordinator? Do they have experience in your industry? Can you request specific vendors or are you assigned whoever’s available?

Fourth, what’s the activation process? Do you call your insurer or do you call the incident response coordinator directly? How fast can forensics arrive? What’s the timeline from discovery to mobilization?

These questions determine whether your cyber insurance works as intended or leaves you improvising while waiting for claims approval.

The Real Value of Cyber Insurance

Cyber insurance isn’t primarily indemnity coverage. It’s emergency response infrastructure. You’re paying for a pre-built team of specialists, forensics capacity, legal expertise, and vendor relationships that mobilize the moment you call.

Companies that understand this buy cyber insurance for the vendor panel, not the payout. They focus renewal discussions on response speed and team quality, not just the indemnity amount. They test the vendor relationships before they need them.

This perspective shift changes how companies approach cyber risk. Instead of hoping for a fast insurance payout after a breach, they’re ensuring the emergency response infrastructure is in place to minimize breach damage in the first place.

The policy pays for recovery after damage is done. The emergency services prevent damage from happening in the first place. Understanding this distinction is how cyber insurance becomes a risk management tool rather than just a financial backstop.

Know Your Emergency Response Infrastructure Before the Attack

Cyber incidents are inevitable. The response speed determines the outcome. Understanding what emergency services your cyber policy actually includes—and whether those services are retained or appointed—determines whether your company recovers or collapses when an attack occurs.

Continuum helps companies understand their cyber insurance emergency response coverage and vendor panel capabilities. We review what’s actually included, what’s excluded, and whether the pre-contracted services are adequate for your operational complexity.

Audit your cyber insurance emergency response infrastructure before the next attack lands. Contact us to review your incident response and forensics coverage.

What This Report Covers

• Why insurance for APAC’s payment providers is no longer a discretionary buy
• What the sponsor bank contract typically requires, and where the requirements diverge from actual exposure
• How a payment error becomes a PI claim, and where the policy stops
• Where Cyber, Crime, and Social Engineering Fraud sit relative to each other
• What safeguarding under the Singapore Payment Services Act and Hong Kong’s PSSVFO actually requires
• Regulatory liability cover for HKMA and MAS investigations, and where the largest gaps appear

Download the PDF →

When HKMA or MAS opens an investigation into your payment operations, three things happen simultaneously. Defence costs start accumulating. Key personnel face scrutiny. And your regulatory investigation insurance coverage suddenly matters far more than most payment licensees realize. Understanding which policies respond—and which don’t—determines whether your firm absorbs the cost or insurance does. This guide covers how regulatory investigation insurance for fintech works across D&O, PI, and Crime policies.

What Triggers a Regulatory Investigation

Regulatory investigations into payment licensees typically stem from four areas: AML and CFT failures, conduct breaches, capital and reporting issues, or operational failures affecting customers. HKMA and MAS have broad powers to open investigations without establishing wrongdoing first. A notice of investigation is sufficient to trigger costs.

These investigations are fundamentally different from customer claims or operational disputes. The regulator isn’t claiming you owe them money. They’re investigating whether you’ve violated rules. The investigation itself—not the outcome—is where costs concentrate: external counsel, compliance experts, document production, and management time.

Most payment licensees don’t anticipate this exposure because it sits outside typical operational risk frameworks. It’s not a breach. It’s not a lawsuit. It’s regulatory scrutiny.

Where D&O Insurance Responds

Directors & Officers insurance is designed to protect board members from personal liability arising from their governance decisions. In a regulatory investigation, D&O responds to defence costs incurred by officers and directors—external counsel, expert witnesses, investigation support.

D&O does NOT cover fines or penalties imposed by the regulator. It covers the defence, not the consequence. This distinction matters enormously because regulatory fines can dwarf defence costs.

D&O typically advances defence costs before fault is established. This is critical. Unlike PI or Crime, which often require proof of liability first, D&O pays for your legal defence from day one of an investigation.

However, D&O has strict conditions. Notification deadlines are typically 30-90 days from discovery. Missing notification voids coverage retroactively. Many payment licensees don’t notify their insurers until weeks into an investigation because they don’t realize the clock started ticking when they first learned of the investigation, not when the regulator formally issued notice.

Where Professional Indemnity Falls Short

Professional Indemnity insurance is designed for claims arising from your professional services to clients. It covers errors you make in transaction processing, settlement, or account management that harm customers. It does NOT cover regulatory investigations. (For more on how operational errors trigger PI claims, see Fintech Errors That Turn Into Professional Indemnity Claims.)

Most PI policies explicitly exclude regulatory matters or sub-limit them well below the main aggregate. Some carve out regulatory investigations entirely.

PI also doesn’t advance costs the way D&O does. PI typically responds only after fault is established or a settlement is reached. Regulatory investigations move faster. By the time your PI insurer agrees to cover something, you’ve already spent six figures on counsel.

For payment licensees, the gap is stark: the policy you think covers regulatory risk often doesn’t.

Where Crime Insurance May Help

Crime insurance covers theft, fraud, and dishonesty. (Fraud can take many forms in fintech operations—see Social Engineering Fraud and Crime Insurance Coverage for how this plays out.) In a regulatory investigation context, Crime might cover costs related to employee fraud, embezzlement, or misappropriation that triggered the investigation. If an employee stole customer funds and the regulator opened an investigation as a result, Crime covers your defence costs related to the theft itself.

But Crime doesn’t cover the regulatory investigation broadly. It covers the underlying crime. If the investigation stems from AML failures, compliance gaps, or operational errors—not employee dishonesty—Crime won’t respond.

Many payment licensees carry Crime insurance for employee theft but don’t realize it doesn’t extend to regulatory defence costs arising from systemic failures.

Regulatory Investigation Insurance Gaps: The Coverage Problem

Here’s where the problem concentrates: regulatory investigations often involve all three areas (D&O, PI, Crime) but none of the policies respond comprehensively.

A typical scenario: HKMA investigates AML screening failures. The investigation triggers board liability (D&O territory), potential customer harm (PI territory), and possible employee negligence (Crime territory). But D&O covers board defence. PI doesn’t cover AML failures. Crime covers employee issues, not systemic controls.

Your firm needs defence costs covered across the entire investigation, not piecemeal by whichever policy technically applies to each angle. The gap is where none of them do.

What Payment Licensees Need to Check

Before a regulatory investigation occurs, payment licensees should review three things across D&O, PI, and Crime policies:

First, notification requirements. When does the clock start? Is it when you suspect an investigation? When the regulator formally notifies you? When you discover the underlying issue? Different policies define “discovery” differently. Missing the window voids coverage.

Second, exclusions for regulatory matters. Does your D&O policy exclude regulatory fines and penalties (yes, probably)? Does your PI policy exclude regulatory investigations (likely)? Does your Crime policy cover employee-related investigations but not systemic AML failures (often)? Map the exact exclusions in your policies, not the summary brochures.

Third, scope and limits. If your D&O policy covers regulatory defence, what’s the limit? Is it a sub-limit below the main aggregate? Does it cover defence costs only or also settlement costs? Are there conditions (like cooperation clauses) that might affect coverage?

The Conversation with Your Broker

Payment licensees should have a specific conversation with their broker about regulatory investigation coverage. The question isn’t “Are we covered for regulatory investigations?” (the answer is complicated). The question is: “Walk me through D&O, PI, and Crime. Show me exactly which policy covers regulatory defence costs. Show me the exclusions. Show me the notification requirements. Show me the limits.”

If your broker can’t answer clearly, or if the answers reveal gaps, that’s your signal to restructure coverage before an investigation occurs.

Why This Matters Now

Regulatory scrutiny in fintech is intensifying. HKMA and MAS are actively investigating payment licensees for compliance failures, operational gaps, and control breakdowns. The investigations aren’t rare anymore. They’re becoming routine for firms operating at scale.

Firms that understand their coverage landscape—what’s protected, what’s excluded, what notification triggers what—can respond decisively when an investigation arrives. Those that discover their coverage gaps mid-investigation absorb costs that should have been insured.

Understand Your Regulatory Investigation Insurance Before It’s Needed

Payment licensees operate in an environment where regulatory investigations are inevitable, not exceptional. Your D&O, PI, and Crime coverage will determine whether your firm absorbs investigation costs or insurance responds. Understanding that coverage now prevents expensive surprises later. Just as understanding your Tech Professional Indemnity requirements is critical when working with sponsor banks, understanding your regulatory investigation insurance is critical before HKMA or MAS calls.

Continuum helps fintech payment licensees understand their regulatory investigation exposure across D&O, PI, and Crime policies. We review your policy language, identify coverage gaps, and clarify notification requirements so you’re prepared before an investigation occurs.

Review your coverage before HKMA or MAS knocks on the door. Contact Continuum to map your regulatory defence coverage.

Safeguarding customer money is a legal duty for payment firms, and most treat it as the end of the story. It is not. Safeguarding and insurance do different jobs. Firms that assume one covers the other are exposed in ways they rarely see until a loss lands.

What the Rules actually Require

If your firm holds customer money, regulators require you to ring-fence it. In Singapore, that duty sits in Section 23 of the Payment Services Act, which applies to major payment institutions. In Hong Kong, the parallel obligation sits in the Stored Value Facilities Ordinance (Cap. 584), which requires SVF licensees to protect the float.

The methods are narrow. Under Section 23, a firm safeguards customer money in one of three ways: a trust account with a safeguarding institution, an undertaking from one, or a guarantee from one, which can include a prescribed insurer. The money must stay separate from the firm’s own funds, and it must be reconciled and reported. Hong Kong works similarly, usually through a trust arrangement, sometimes backed by a bank guarantee or a custodian.

All of this does one job. It makes sure customers get their money back if the firm goes insolvent. That is the purpose of safeguarding, and it is where safeguarding stops.

Where Safeguarding Falls Short

Insolvency is not how most firms lose customer money. The real losses are operational, and safeguarding does nothing to reverse them.

An employee with access can steal safeguarded funds. A reconciliation can drift out of line and go unnoticed. Money can be commingled by oversight. A custodian or a process can fail. In each case the money was set aside exactly as the rules require, and it is still gone. Safeguarding kept it in a separate box. It did not stop someone emptying the box.

This is the gap. Safeguarding proves the money was ring-fenced. It does not make the customer whole when that money is stolen or mishandled.

The Cover that Responds

When safeguarding breaks, insurance is what responds, and different failures call on different policies. This is where safeguarding customer money stops being a compliance question and becomes an insurance one.

Crime insurance answers theft. If an employee takes safeguarded funds, if a payment is fraudulently transferred, or if staff are deceived by social engineering, a crime policy is built to respond. Cover depends on how the policy is worded, so the definition of insured property and funds matters.

Professional Indemnity answers error. Not every loss is theft. Some flow from a mistake in the safeguarding process itself, a negligent reconciliation failure or a procedural slip that causes a customer loss. Where the loss stems from that error, PI may respond, again subject to the wording.

Directors and Officers answers the aftermath. A safeguarding failure rarely ends with the money. It invites a regulator to ask how it happened, and it puts the firm’s directors under scrutiny. A D&O policy can meet the cost of defending them through that investigation. It pays for the defence, not the fine.

Together, these three cover most of what a payment firm is realistically exposed to when safeguarding fails. None of them is automatic. Each depends on the wording matching the way the firm actually holds and moves customer money.

Stress-test the Cover Before An Incident Does

Here is the part most firms miss. They safeguard diligently, buy a crime and PI programme, and never check whether that programme would actually respond to a safeguarding loss. The policies were often bought for a generic business, not for a regulated holder of customer money, and the gaps only surface at claim time.

The fix is straightforward. Map the ways safeguarding could break, theft, error, custodian failure, and hold each one against the wordings you already carry. Where a failure would not be paid, the cover needs adjusting or extending, and the policies need to work together rather than leaving seams between them.

This is a recommendation rather than a regulatory checklist, and the right structure depends on the jurisdiction, the custodians and how the firm is set up. Continuum advises payment firms across Asia on exactly this, helping them confirm their cover would respond to a safeguarding incident before one puts it to the test. For a clear view of your exposure, contact us.