Making cyber risk legible to people who are not in IT

The challenge

Cyber insurance is bought by people who do not think about cyber risk until it happens to them. The subject is technical, the coverage is abstract, and most explanations are written for security teams rather than the business owner signing the cheque.

What we did

• Opened with the threat rather than the product, because nobody buys a policy for a problem they have not accepted they have.
• Split the argument into three plain questions — what is happening, what is cyber insurance, why does it matter — so the reader is never more than one heading from an answer.
• Turned abstract coverage into concrete consequences: breach notification, forensic recovery, ransom handling, income lost while systems are down, legal defence.
• Designed it digital-first in a tall scrolling format built for a phone, not a print leaflet rescanned into a PDF.
• Held the Jubilee typographic system from the flyer and calendar work, so the piece is unmistakably part of the same family.