How do you calculate cyber insurance exposure?

Multiply exposure units by cost per unit and by the uninsured or retained share, then add the fixed deductible and uncovered cost. Here: 20 × $30,000 × 35% = $210,000, plus $75,000 = $285,000 retained.

What is a cyber exposure unit?

A scalable driver of loss — for example an affected production line, site, or data record class — each carrying a comparable cost when impacted. The example uses 20 units at $30,000 each.

What does the uninsured or retained share represent?

The portion of gross loss your policy does not cover due to sublimits, exclusions, or coinsurance — 35% in the example, meaning the policy absorbs the other 65% of variable loss.

Is retained exposure the same as the deductible?

No. The deductible is one fixed component; retained exposure also includes the uninsured share of variable loss and any explicitly uncovered costs, all captured here.

How do I reduce cyber insurance exposure?

Lower the exposure unit count or cost through segmentation and backups, negotiate a smaller retained share or higher sublimits, or reduce uncovered cost categories — each directly shrinks the $285,000 retained figure.

Why is my retained exposure higher than my deductible?

Because policies rarely cover OT losses dollar-for-dollar; coinsurance, sublimits, and exclusions leave a retained share of every loss on top of the deductible.

Industrial Cybersecurity & OT Risk calculator

Cyber Insurance Exposure Calculator

Cyber insurance exposure estimates the loss your organization keeps — not what the policy pays — after a cyber event hits your OT environment. Risk managers, CFOs, and OT security leaders use it to right-size coverage, set retention levels, and decide whether to invest in controls or buy more limit. Because manufacturing policies carry sublimits, exclusions, and deductibles, the retained share of a loss is often far larger than executives assume. This calculator scales your exposure by the uninsured or retained portion and adds the fixed deductible and uncovered costs, giving you the number that actually lands on your balance sheet.

What this calculator does

Estimate retained cyber loss exposure after considering insured scope, cost per exposure unit, and fixed deductible or uncovered costs.
Use it when reviewing cyber insurance limits, deductibles, downtime exclusions, and OT recovery cost assumptions.
It estimates total retained cyber exposure by scaling exposure units and their cost by your uninsured share, then adding fixed deductible and uncovered cost.

Formula used

Variable cyber insurance exposure = cyber exposure units × cost per exposure unit × uninsured or retained share
Total cyber insurance exposure = variable cyber insurance exposure + fixed deductible and uncovered cost

Inputs explained

Cyber exposure units:
Cost per exposure unit:
Uninsured or retained share:
Fixed deductible and uncovered cost:

How to use the result

Use it during insurance renewal, when modeling a retention or self-insurance decision, or to quantify the residual risk a control investment would reduce.
It is a deterministic point estimate, not a probabilistic loss model — it does not weight scenarios by likelihood or capture correlated multi-site events.

Common questions

How do you calculate cyber insurance exposure? Multiply exposure units by cost per unit and by the uninsured or retained share, then add the fixed deductible and uncovered cost. Here: 20 × $30,000 × 35% = $210,000, plus $75,000 = $285,000 retained.
What is a cyber exposure unit? A scalable driver of loss — for example an affected production line, site, or data record class — each carrying a comparable cost when impacted. The example uses 20 units at $30,000 each.
What does the uninsured or retained share represent? The portion of gross loss your policy does not cover due to sublimits, exclusions, or coinsurance — 35% in the example, meaning the policy absorbs the other 65% of variable loss.
Is retained exposure the same as the deductible? No. The deductible is one fixed component; retained exposure also includes the uninsured share of variable loss and any explicitly uncovered costs, all captured here.
How do I reduce cyber insurance exposure? Lower the exposure unit count or cost through segmentation and backups, negotiate a smaller retained share or higher sublimits, or reduce uncovered cost categories — each directly shrinks the $285,000 retained figure.

Last reviewed 2026-05-12.