What Does TMK Cyber Cover?

The short answer (as of August 2026)

TMK cyber is the Agency Controls Qualified Coverage program — a specialty combined Cyber Liability + Technology E&O policy placed by OnePark Risk and underwritten by Tokio Marine Kiln (TMK) at Lloyd's of London. It's open only to startups and technology companies whose SOC 2 and/or ISO 27001 audits are validated by Agency, and it offers combined limits with preferred pricing because the controls behind the risk are independently verified.

What the Program Is

Agency Controls Qualified Coverage is a specialty combined Cyber Liability + Technology E&O program placed by OnePark Risk. Rather than buying cyber and tech E&O as two separate policies, eligible companies get both lines in a single program with one combined limit — a structure that suits technology companies whose cyber and professional-services exposures overlap.

The program is underwritten by Tokio Marine Kiln (TMK) at Lloyd's of London. TMK is a managing agent at Lloyd's, and policies written in the Lloyd's market are backed by the market's financial strength ratings: A+ (Superior) from AM Best and AA− from S&P and Fitch. That backing matters for a technology vendor whose enterprise customers care that the paper behind their coverage is strong. Full details live on the Agency Controls Qualified Coverage page.

Who Is Eligible

The program is intentionally narrow. It's open only to startups and technology companies whose SOC 2 and/or ISO 27001 audits are validated by Agency. That validation requirement is the defining feature: instead of relying on a self-attested application, the program admits companies that have already proven their security controls through an independent audit.

This is what makes it a natural next step after a SOC 2 engagement — the audit you completed for customers becomes the entry ticket to a program built around verified controls. If you haven't completed SOC 2 or ISO 27001 yet, standard-market cyber and tech E&O remain available; the controls-based program is specifically for companies that can clear the validation bar. For how SOC 2 fits the broader picture, see what SOC 2 unlocks for insurance.

Coverage and Limits

The program combines two coverages into one policy:

• Cyber Liability. Responds to data breaches, privacy claims, and losses arising from a security failure — the exposure every technology company that holds customer data carries.
• Technology E&O. Responds to financial loss a customer suffers when your software or service fails to perform as promised — the professional-services side of a tech company's risk.

Both sit under a single combined limit. Available limits vary with the current program terms and the applicant's needs. Because the program is combined, one policy and one certificate can address requirements that would otherwise need two policies — see tech E&O vs cyber for how the two coverages relate.

Why the Pricing Is Preferred

The program offers preferred pricing, and the reason is structural rather than promotional: because eligibility requires independently validated controls, the underwriter is pricing a pre-vetted pool of risks. When controls are verified up front instead of self-attested, the underwriter carries less uncertainty about the risk — and that supports better terms for the companies that qualify.

This is the concrete version of the general principle that strong, verified controls improve your insurance position. The program simply builds that principle into eligibility: prove your controls, and you access pricing designed for companies that can. For the honest picture of how controls and SOC 2 affect cost more broadly, see does SOC 2 lower cyber insurance cost.

Explore the Program with OnePark Risk

OnePark Risk places the Agency Controls Qualified Coverage program for startups and technology companies with validated SOC 2 and/or ISO 27001 audits, and it also places standard-market cyber and tech E&O for companies still on that path. If you've completed an audit, we'll confirm eligibility and walk you through the combined coverage and limits. Request a coverage review and bring your report.

Sources

• Lloyd's Insurance Market — Lloyd's
• Guide to Best's Credit Ratings — AM Best