CNA Epack 3®
CNA Epack 3® is a cyber insurance product underwritten by Continental Casualty Company (CNA) (CNA Financial Corporation (USA)), available in USA. It is aimed at small and medium-sized businesses, mid-market companies and large enterprises. Coverage limits reach up to Bespoke.. The policy extends beyond standard cyber liability with Cyber crime / FTF and Tech E&O combined. Policyholders get 5 bundled proactive services — Vulnerability scanning, Risk assessment, Incident response and Pre-breach advisory, among others — designed to reduce breach risk before a claim ever happens. The carrier holds an AM Best rating of A+ (Superior) – AM Best. It is distributed through insurance brokers.
Product Details§ 01
Advantages & Limitations§ 02
Advantages
- CNA Epack 3® (EP3): first-of-its-kind modular management liability policy; cyber, media, and technology/professional liability in one form.
- Modular structure: coverage options include Technology and Professional Liability, Network Security and Privacy Injury Liability, and Media — combine as needed.
- Coverage: all NetProtect 360® coverages plus E&O (Tech MPL) — compartmentalised coverage options that work together without overlap.
- Clear, concise policy language — designed for simplicity and ease of understanding.
- Admitted basis for small risks; competitive coverage with reduced application for <$100M revenue.
- Also covers: Directors & Officers Liability, Employment Practices Liability, Fiduciary Liability, Crime, K&R (via Epack Extra form).
- CNA CyberPrep included for all policyholders.
- Available in 36 US states (admitted basis for smaller risks).
Limitations
- Available in 36 US states only — not available nationwide.
- Modular management liability form; not standalone cyber.
- Requires 2+ years of operating history.
- Broker-only distribution.
Contact & Response§ 03
Frequently asked questions§ 04
+Who is CNA Epack 3® designed for?
CNA Epack 3® by Continental Casualty Company (CNA) targets small and medium-sized businesses, mid-market companies and large enterprises in USA. Geographic scope: 36 US states (admitted basis)..
+What proactive security services are included with CNA Epack 3®?
The policy bundles 5 proactive services: Vulnerability scanning, Risk assessment, Incident response, Pre-breach advisory and Crisis management. These preventive services are typically included in the premium.
+Does CNA Epack 3® help with NIS2 or DORA compliance?
Continental Casualty Company (CNA) indicates the following NIS2/DORA support for this product: Not applicable..
+How can I buy CNA Epack 3® in USA?
CNA Epack 3® is sold through insurance brokers — broker contact: https://www.cna.com/agent-broker. Compare it with alternatives in USA on Ryskly before approaching a broker.