Industry benchmarking
Loaded benchmark price variation
Underwriting — quote RSK0000206801Q001
Quote
Cyber · OpenMkt
- Risk reference
- RSK0000206801Q001
- Inception – expiry date
- 01/01/2024 – 12/31/2024
- Insured
- Marriott International Inc.
- Intermediary
- Marsh Commercial (Bristol)
- Product
- OpenMkt
Quote sections
- Risk details
- Review & pricing
- Quoting
- Taken up
Quote reviewing stage 4 of 4
Cloud service locations
Hosting regions declared on this risk
Concentration in US East — 14 of 50 workloads
Coverages (1st/3rd party)
Share of limit by deployment model
Threat attractiveness
By territory and year of account
YoA claims experience
Sum of limits by year of account
Ext. cov. — data breach
Ext. cov. — liabilities
Ext. cov. — PD
Silent
Standalone — data breach
Standalone — liabilities
- Minor breach
- No claims
- Substantial breach
Risk details
Core rating attributes captured on the submission.
- Industry
- Hospitality
- Employees
- 121,000
- Annual revenue
- $23.7B
- Records held
- 142M
- Requested limit
- $50M
- Retention
- $2.5M
- Territory
- Worldwide
- Prior carrier
- Beazley
Review & pricing
Technical price against the quoted premium.
- Technical price
- $1,840,000
- Quoted premium
- $1,962,000
- Rate adequacy
- 106.6%
- Commission
- 17.5%
Security controls maturity
This insured against the industry median
Control attestations
Evidence supplied with the submission
| Control | Coverage | Score | Evidence |
|---|---|---|---|
| Multi-factor authentication | All remote access | 4 / 5 | Verified |
| Immutable backups | Daily, 35-day retention | 5 / 5 | Verified |
| Endpoint detection & response | 82% of endpoints | 3 / 5 | Partial |
| Patch management | Critical within 14 days | 4 / 5 | Verified |
| Security awareness training | Quarterly, all staff | 5 / 5 | Verified |
| Network segmentation | Payment estate only | 3 / 5 | Partial |
| Incident response plan | Tested Mar 2026 | 4 / 5 | Verified |
Vendor concentration
Share of the insured's technology stack
Critical dependencies
Aggregation risk from shared vendors
| Vendor | Service | Share | Book exposure | Failover |
|---|---|---|---|---|
| AWS | Core hosting | 42% | $1.24B | Multi-region |
| Microsoft 365 | Email & identity | 23% | $684M | Multi-region |
| Salesforce | Guest CRM | 14% | $412M | Single region |
| Oracle Cloud | Reservations | 12% | $348M | Multi-region |
| Other SaaS | 14 applications | 9% | $264M | Mixed |
Policy details
Terms as they will appear on the bound policy.
- Policy form
- Cyber & Privacy 2024
- Jurisdiction
- England & Wales
- Currency
- USD
- Waiting period
- 8 hours
- Retroactive date
- 01/01/2019
- Notification period
- 60 days
Coverage sections
Limits and premium by section
| Section | Limit | Retention | Premium | Status |
|---|---|---|---|---|
| Data breach response | $25.0M | $1.0M | $684,000 | Rated |
| Business interruption | $15.0M | $1.0M | $512,000 | Rated |
| Third-party liability | $10.0M | $500,000 | $438,000 | Referred |
| Cyber extortion | $5.0M | $250,000 | $204,000 | Rated |
| Regulatory defence | $5.0M | $250,000 | $124,000 | Rated |
Underwriter notes
Most recent first
-
Aaron Taylor · 22 Aug 2026
Third-party liability referred: requested limit sits above my authority. Passed to the portfolio team with the cloud concentration note attached.
-
Dana Whitfield · 19 Aug 2026
Benchmark price variation for 2023 is well above the prior three years. Confirmed with the broker that the increase reflects the expanded records count, not a rating error.
-
Sophia Williams · 14 Aug 2026
Loss runs received for 2020–2023. No substantial breaches in the last two years of account.
Documents
Attached to this quote
| Document | Type | Size | Uploaded |
|---|---|---|---|
| Submission pack.pdf | Submission | 4.2 MB | 12 Aug 2026 |
| Loss runs 2020-2023.xlsx | Loss run | 318 KB | 14 Aug 2026 |
| Cloud architecture.pdf | Technical | 1.8 MB | 16 Aug 2026 |
| Quote schedule.pdf | Quote | 742 KB | 21 Aug 2026 |
Technical price
$1.84M
Model v4.2 · 12 Aug 2026
Quoted premium
$1.96M
Issued 21 Aug 2026
Rate adequacy
106.6%
Above the 100% floor
Expected loss ratio
48.2%
Target below 60%
Price build-up
Technical price to quoted premium
- Increases premium
- Reduces premium
Rate adequacy distribution
Bound cyber risks, trailing 12 months
Referral triggers
Rules this risk breached during rating
| Trigger | Threshold | This risk | Referred to | Status |
|---|---|---|---|---|
| Single risk TIV | Above $50M | $50.0M | Portfolio team | Cleared |
| Cloud concentration | Above 25% one region | 28% | Cyber CUO | Awaiting |
| Records held | Above 100M | 142M | Cyber CUO | Cleared |
| EDR coverage | Below 90% endpoints | 82% | Risk engineering | Awaiting |
Audit history
Every stage change on this risk
-
Taken up
Aaron Taylor · 22 Aug 2026, 16:04
-
Quote issued
Aaron Taylor · 21 Aug 2026, 11:20
-
Review & pricing complete
Dana Whitfield · 19 Aug 2026, 09:42
-
Risk details captured
Sophia Williams · 12 Aug 2026, 14:08