Most insurers are outsourcing their incident response capabilities, and over half now notify insured parties about critical vulnerabilities or ongoing cyber incidents. Additionally, Gallagher Re notes that the majority of insurers are classifying claims based on high-level categories, such as malware, data breach, and network incidents.