At a glance
Understand the risk.
Ask the right questions.
Financial Institutions Insurance starts with a clear picture of the work you perform, the responsibilities you accept and the events that could interrupt your business. This guide brings together common risks, insurance categories, practical documents and questions to discuss with your broker. Your business may need a different combination of covers or extensions from another business in the same industry.
Use the sections below to prepare for an insurance conversation in Perth, Sydney, Melbourne, Brisbane, Canberra or elsewhere in Australia. These examples are general information, not a recommendation that a particular policy is suitable for you. Your activities, locations, contracts and the applicable policy wording need to be considered together.
General information only. This does not take into account your objectives, financial situation or needs. Before acting, consider whether the information is appropriate for you. Cover is subject to insurer acceptance and the policy terms, conditions, limits and exclusions. Read the Financial Services Guide and the relevant PDS (where applicable) and/or policy wording before deciding.
01 / Understand your exposure
Common risks to consider.
- A client alleges that advice, disclosure, placement or administration was unsuitable, incomplete or delayed.
- A complaint concerns fees, conflicts, representations, disclosure documents or failure to follow instructions.
- Sensitive identification and financial information is compromised or sent to the wrong recipient.
- An incident arising from the day-to-day activities of financial institutions leads to an allegation of injury, damage or financial loss.
- A contract, approval or record does not clearly document the responsibilities of financial institutions after a problem occurs.
- Client allegations that advice, reports, designs, calculations or services caused financial loss.
02 / Connect risks with cover
Insurance commonly considered.
No single package suits every business. The descriptions below identify possible cover categories; each is subject to its own wording and underwriting.
may respond to covered allegations that professional services, advice, designs or omissions caused financial loss, subject to the insured services, retroactive date and claims-made notification requirements.
may respond to certain third-party injury or property-damage allegations arising from business activities, subject to the insured activities and policy wording.
may assist with specified cyber incidents, privacy events, response costs and business interruption, depending on the event, security controls, sub-limits and exclusions.
may cover specified buildings, contents, stock and equipment following insured events, subject to declared values, exclusions and settlement terms.
may assist with insured loss of gross profit or revenue and certain additional costs when a covered event triggers the policy, subject to the indemnity period and calculation basis.
may respond to certain directors and officers, employment-practices, statutory-liability or crime exposures where included, subject to policy terms and legal insurability.
A policy name does not establish that an activity or incident is insured. Review the insured business description, trigger, conditions, limits, excess and exclusions with your broker.
03 / A closer look at your business
Details worth discussing.
Map the institution and its services
Financial institutions can combine advice, lending, investment administration, funds management and transaction services within related entities. An insurance review should map those entities and identify which services each one performs. Include subsidiaries, outsourced functions and any business acquired during the period. Describe the customers served, assets or funds administered and the types of decisions staff can make. The scale of a transaction alone may not capture the exposure: access to client money, authority to execute instructions and reliance on advice can create different forms of loss even within one customer relationship.
Information flows deserve equal attention. Establish where identity documents, account details and transaction records are stored, and which service providers can access them. Explain how payment changes, unusual instructions and privileged access are checked. The distinction between an employee’s mistake, dishonest conduct and a cyber incident can be important when reviewing professional indemnity, crime and cyber policies. Management liability raises further questions about decisions made by directors and officers. A coordinated review should examine potential overlap and gaps without assuming that buying several products guarantees a response to every event involving financial loss.
Use representative files to test the wording
Provide service agreements, disclosure material, complaints procedures and representative client files for the insurance discussion where appropriate. These documents help define the services promised and the evidence kept when instructions change. Review contracts with outsourced administrators, technology providers and distribution partners. Ask which entity has accepted liability, where disputes can be brought and whether contractual indemnities exceed the proposed cover. The named insured and professional services definition should be checked against the actual operating structure, including any activities carried out under another organisation’s authority or through an appointed representative arrangement.
Policy questions should cover prior acts, retroactive dates, known circumstances and the treatment of connected claims. Consider defence costs and whether they sit within or outside the relevant limit, as specified by the wording. Ask about investigations, regulatory matters, restitution, fee disputes and exclusions relating to particular products or investments. These areas require careful reading and should not be inferred from a broad policy heading. A certificate of insurance can support a contractual process, but it does not demonstrate that a particular complaint, transaction or allegation will be insured. Obtain specific clarification where a material service sits near an exclusion.
Coordinate complaints, incidents and renewal
Create a clear route from customer complaint handling to the person responsible for insurance notification. Staff should understand that a matter may need assessment before formal legal proceedings begin. Preserve instructions, approvals, call records and relevant versions of documents without rewriting the historical file. For a suspected funds diversion or data compromise, coordinate financial controls and technical response while keeping an accurate timeline. The institution should know which specialist advisers can be engaged and when insurer approval is needed. Different policies may have different notification procedures, so the response plan should make those distinctions accessible.
Renewal preparation should capture changes in product mix, distribution, funds handled, outsourcing and customer location. Review significant complaints and unresolved circumstances early enough to discuss them properly. Consider whether a new platform or acquisition creates temporary migration and record keeping risks. Compare policy limits with realistic concentrations of exposure, while recognising that a limit is only one part of the cover. Keep the review connected to the institution’s governance and risk information. Insurance can assist with selected liabilities and costs, but the response still depends on the facts, policy definitions, exclusions and any applicable conditions. That distinction should remain clear in internal purchasing and renewal decisions.
04 / Put it in context
What an incident might look like.
Hypothetical examples only. These are not BAU client stories or predictions of a claim outcome.
A client alleges that advice, disclosure, placement or administration was unsuitable, incomplete or delayed. The affected party seeks compensation, defence costs or rectification expenses. Whether any policy responds would depend on the allegations, insured activities, policy trigger, exclusions, excess and limit.
A complaint concerns fees, conflicts, representations, disclosure documents or failure to follow instructions. The event also interrupts normal trading or creates additional expense. Property, liability, professional, cyber or interruption cover may be relevant only where the facts satisfy the applicable wording.
A few minutes. A different perspective.
Put your thinking
into practice.
Three situations for financial institutions businesses. Choose a practical next step, then explore why the details matter.
A learning activity with hypothetical situations. It is not a risk assessment, personal advice or a prediction of insurance cover.
What would you do next?
Work through the facts, the records and the questions you would take to your broker. There is no time limit.
05 / Prepare for the conversation
Bring the details.
Make the discussion useful.
Documents and contracts
- FSG, engagement terms, disclosure records and advice files.
- Authorisations, compliance procedures and complaint records.
- Client engagement letters, proposals, scopes of work, fee schedules and variation approvals.
- Professional appointments, consultancy agreements, service-level agreements and subcontractor contracts.
- Licences, memberships, qualifications, quality-assurance procedures and complaints records.
- Confidentiality agreements, data-processing terms and cyber-security policies.
Questions to ask before choosing cover
- Does the insured-services description accurately include every service, deliverable and source of revenue?
- Is professional indemnity written on a claims-made basis, and are the retroactive date and notification provisions suitable?
- Are contractors, subcontractors, joint ventures and work performed overseas included or separately declared?
- Do client contracts impose indemnities, warranties, liability caps, insurance limits or principal-insured requirements?
- Are cyber incidents, privacy events, social engineering and loss of documents included, excluded or sub-limited?
06 / Know the limitations
What may not be covered.
The following are examples only, not a complete exclusion list. Product terms vary, and the applicable PDS and/or policy wording must be checked.
- Known complaints, demands or circumstances that existed before cover began or were not disclosed when required.
- Contractual guarantees, warranties or assumed liabilities that go beyond the duty otherwise owed at law.
- Deliberate, dishonest or fraudulent conduct by an insured person, although innocent-insured provisions may vary.
- Work outside the activities, professions, jurisdictions or retroactive dates stated in the schedule.
- Cyber, intellectual-property, bodily-injury or property-damage claims where the selected policy does not include the relevant extension.
07 / Questions, explained
Frequently asked questions.
What insurance do financial institutions commonly consider?
Depending on their activities, assets, staff and contracts, financial institutions may consider Professional indemnity insurance, Public and products liability insurance, Cyber insurance. Other policies or extensions may also be relevant. No single list is suitable for every business, and availability is subject to insurer appetite and underwriting.
Would insurance automatically respond if a client alleges that advice, disclosure, placement or administration was unsuitable, incomplete or delayed?
Not automatically. A claim outcome depends on the actual facts, the policy period, insured activities, definitions, exclusions, conditions, excesses, sub-limits and notification requirements. The relevant wording should be reviewed before relying on cover.
What information is usually needed to obtain a quote for Financial Institutions Insurance?
Insurers commonly request turnover or revenue, payroll, staff and contractor numbers, locations, claims or complaints history, and the exact activities to be insured, plus fee income by service, major clients, contract terms, retroactive date and prior circumstances. Complete and accurate disclosure helps the insurer assess the risk, but it does not guarantee that cover will be offered or that a future claim will be accepted.
08 / Keep exploring
Connect the wider picture.
Read about the primary insurance categories and clarify the terms used in policy discussions. A link does not mean a product is suitable for your business.
Useful insurance terms
Official guidance
Local understanding. National reach.
Across Australia.
Connected to your business.
Based in Osborne Park, Western Australia, and supporting businesses nationally. These are service areas, not separate BAU offices. State and territory requirements can differ.
WAWestern Australia+
Perth, Bunbury, Mandurah, Rockingham and Kalgoorlie.
NSWNew South Wales+
Sydney, Newcastle, Central Coast, Wollongong and Maitland.
VICVictoria+
Melbourne, Geelong, Ballarat, Bendigo and Shepparton.
QLDQueensland+
Brisbane, Gold Coast, Sunshine Coast, Townsville and Cairns.
SASouth Australia+
Adelaide, Mount Gambier, Whyalla, Gawler and Port Pirie.
TASTasmania+
Hobart, Launceston, Devonport, Burnie and Ulverstone.
ACTAustralian Capital Territory+
Canberra, Gungahlin, Tuggeranong, Belconnen and Woden Valley.
NTNorthern Territory+
Darwin, Palmerston, Alice Springs, Katherine and Nhulunbuy.
Let’s start with your business
A clearer conversation
about your insurance.
Tell us what you do, what has changed and what you need to understand.
Speak with BAU Risk
Request a callback.
Tell us about your business and the cover questions you would like to discuss.
Before sharing personal information, read our privacy information.