Epic 2026 Excess Cyber Renewal Indication - Agenda Item - 5-2026

AID 2015133 · View on Simbli

Agenda Item

i. Renewal of the District’s Excess Cyber Risk Insurance Policy (Not to Exceed $143,884)

Summary: Presented by: Mr. Glinton R. Darien, Jr., Director of Legal Affairs, Division of Legal Services
Request: It is requested that the DeKalb County Board of Education approve the renewal of the District’s Excess Cyber Risk Insurance coverage with Liberty Surplus Insurance Corporation (“Liberty”), for $143,884. This cost is an early indication of the renewal quotation. Although not anticipated, the final quotation from Liberty may decrease.
Why: The DeKalb County School District (“District”) currently has an Excess Cyber Risk Insurance Policy with Liberty. The coverage was purchased in February of 2024. That short-term policy expired on July 1, 2024; at which time it was renewed for a full year. The current insurance policy will expire on July 1, 2026. Therefore, the District must select an insurance carrier to renew this coverage for the fiscal year 2027.

After conducting research, the renewal of excess cyber insurance coverage is recommended due to continuing attempts by hackers to infiltrate computer networks of state, county, and local governmental entities. Educational entities have also been targets for cyber-attacks. Since there is a high potential for loss in this area that could impact the District’s financial position, excess insurance coverage is recommended. Research shows that there is approximately a 31% increase in cyberattacks against K-12 school systems as compared to last year.
Details: This item requests that the Board of Education approve the renewal of the District’s Excess Cyber Liability Insurance Policy with Liberty. The Alliant Property Insurance Program (“APIP”) currently provides the underlying coverage for the District’s cyber liability. Liberty has insured the District’s Cyber Liability exposure since February of 2024 when coverage was purchased to enhance the existing coverage provided as part of the District’s property insurance through APIP.

This year’s renewal premium with Liberty is $143,884. This represents a zero dollar and 0% increase over last year’s premium with Liberty which was also $143,884.
Financial impact: This is a budgeted expense within the Risk Management budget. The cost code is 100.2600.552000.00011.7490.9990.8010.080.7498. The premium amount is $143,884.
Contact: Mr. H. Eric Hilton, Chief Legal Officer, Division of Legal Services, 678. 676.0159
Mr. Glinton R. Darien, Jr., Director of Legal Affairs, Division of Legal Services, 678.676.0403
Effective: July 1, 2026
Status: Legal Approval Not Required
DEKALB COUNTY SCHOOL DISTRICT




                                DEKALB COUNTY SCHOOL DISTRICT

                                       EXCESS CYBER RISK INSURANCE
                                           RENEWAL INDICATION
                                         July 1, 2026 to July 1, 2027




                                                                           May 03, 2026


                                Prepared by:

                                Danielle Joseph, CPSR, Account Executive
                                Maggie Evans, Assistant Account Manager
                                                                                          1
EPIC INSURANCE BROKERS SERVICE TEAM

  SOUTHEAST GROWTH LEADER                                        BRENNEN PARKER
                                                          DIRECT DIAL 518.937.3203
                                       E-MAIL – BRENNEN.PARKER@EPICBROKERS.COM

  ACCOUNT EXECUTIVE                                           DANIELLE JOSEPH, CPSR
                                                            DIRECT DIAL 470.681.2612
                                                             DIRECT FAX 770.232.9202
                                       E-MAIL – DANIELLE.JOSEPH@EPICBROKERS.COM


  ACCOUNT EXECUTIVE                           ALEXIS HANKERSON-TOLBERT, CIC, AIAM
                                                            DIRECT DIAL 678.379.1165
                                         E-MAIL – ALEXIS.TOLBERT@EPICBROKERS.COM

  ACCOUNT EXECUTIVE                                  LATOYA COTTON, CRM, CIC, CISR
                                                           DIRECT DIAL 678.205.5949
                                                           DIRECT FAX 678.542-2653
                                        E-MAIL – LATOYA.COTTON@EPICBROKERS.COM

  ASSISTANT ACCOUNT MANAGER                                         MAGGIE EVANS
                                                          DIRECT DIAL 770.441.8503
                                         E-MAIL – MAGGIE.EVANS@EPICBROKERS.COM


  VICE PRESIDENT, CLAIMS MANAGER                              CHANTELLE PATTERSON
                                                            DIRECT DIAL 678.475.5706
                                                             DIRECT FAX 678.475.3858
                                   E-MAIL - CHANTELLE.PATTERSON@EPICBROKERS.COM


  RISK CONTROL                                          MICHAEL NISCHAN, CDS, CCSP
  SERVICE REPRESENTATIVES                                   DIRECT DIAL 678.475.5720
                                                                MOBILE 678.938.2012
                                                             DIRECT FAX 678.475.3852
                                       E-MAIL – MICHAEL.NISCHAN@EPICBROKERS.COM


                                                                       MIKE FOLMER
                                                            DIRECT DIAL 678.242.1377
                                                                MOBILE 678.215.8024
                                           E-MAIL – MIKE.FOLMER@EPICBROKERS.COM




                                                                                       2
EPIC INSURANCE BROKERS SERVICE TEAM




          Danielle Joseph, CPSR              Alexis Hankerson-Tolbert, CIC, AIAM       LaToya Cotton- Robinson, CIC, CRM,
           Account Executive                          Account Executive                               CISR
                                                                                               Account Executive

 Danielle is a seasoned commercial         Alexis started off her career on the      LaToya has nearly 20 years of
 insurance and risk management             underwriting side as a trainer and        experience in the property and casualty
 professional with extensive               prep assistant for basics of insurance    insurance industry, including nearly 7
 experience in Commercial Property &       for Citizens Property and Casualty in     years with Resurgens Risk Management,
 Casualty insurance, supporting            South Florida. She then moved on to       Inc. where she was responsible for
 complex client portfolios across a        become a General Liability                servicing a book of middle market and
 range of industries, including national   underwriter and a right hand of the       large municipal clients.
 and multinational organizations.          program developer to assist with          In addition, she served as the OCIP
                                           policy change implementation and          (Wrap Up) Administrator for Fulton
 She has been with EPIC since 2020,
                                           retention improvement before              County Capital Improvement Program,
 managing a multimillion-dollar book
                                           moving to Georgia. Shortly after          DeKalb County Capital Improvement
 of business and serving as a trusted
                                           Alexis, transitioned to the agency side   Program (water/ sewer infrastructure)
 advisor to clients navigating
                                           focusing solemnly on property,            and City of Atlanta, Hartsfield Jackson
 operational change, including
                                           casualty, and risk management.            Atlanta International Airport.
 acquisitions, integrations, and
                                           Throughout the years Alexis has
 evolving risk profiles. She is                                                      She has been with the firm since 2014 .
                                           obtained a series of executive roles
 recognized for her ability to problem-                                              At EPIC Insurance Brokers &
                                           where she has been acknowledged for
 solve in high-stakes environments,                                                  Consultants, Mrs. Robinson is
                                           her long record of successfully guiding
 balancing analytical rigor with                                                     responsible for servicing a complex
                                           local, national and multinational
 practical, client-focused solutions.                                                book of business consisting of Public
                                           clients with their insurance
                                                                                     Entity and School Systems.
 Danielle’s approach emphasizes            needs. Alexis's helm of visionary
 proactive risk identification, coverage   strategies, transformations,              LaToya holds the professional
 alignment, and long-term program          acquisitions assistance, integrations,    designations of Certified Risk Manager
 stability, key elements for               and radical problem solving helped        (CRM), Certified Insurance Counselor
 organizations operating within            propelling growing companies to scale     (CIC) and Certified Insurance Service
 governance-driven environments.           and achieve higher levels of success.     Representative (CISR). Also, she holds
                                           As a 15-year veteran in the insurance     a Property & Casualty Agent License,
 Danielle was named a Pinnacle Award                                                 Surplus Lines Broker License and Life &
                                           and risk management profession,
 recipient, honoring exceptional                                                     Health License.
                                           Alexis is committed to ongoing
 performance, client advocacy, and
                                           professional development. She             Ms. Cotton is currently pursuing an
 leadership impact.
                                           currently holds the following industry    Associate In Risk Management (ARM).
 Danielle holds a Certified Professional   designations, Certified Insurance
 Services Representative (CPSR)            Counselor (CIC) , Associate in Account
 designation, reflecting her               Management (AIAM) and currently
 commitment to professionalism,            working on pursing her Charted
 ethical service delivery, and             Property Casualty Insurance
 continuous development.                   Designation (CPCU). Alexis has been
                                           awarded as honoree of "Women to
 Danielle is currently pursuing the
                                           Watch", and "Legacy Award" for her
 Certified Insurance Counselor (CIC)
                                           leadership, employee development
 Designation.
                                           and operational excellence.
                                                                                                                               3
EPIC INSURANCE BROKERS SERVICE TEAM




                Maggie Evans                             Brennen K. Parker                           Chantelle Patterson
         Assistant Account Manager                    Southeast Growth Leader             Vice President, Property & Casualty Claims


  Maggie began her career in the insurance Brennen K. Parker joined the EPIC                Chantelle has over 20 years of
  industry in 2023 after a successful tenure Southeast Regional team in July of 2023. experience in the risk management and
  in high school education as a mathematics Brennen’s current role in the enterprise as property and casualty claims industry.
  teacher, where she developed strong           Southeast Region Growth Leader, with a She has two additional claims specialists
  analytical and problem-solving skills. Her charge to promote organic growth               on her team to provide a high level of
  transition into the commercial insurance throughout the entire region, is to              service to and ensure all claims are
  space reflects her passion for learning and orchestrate resources needed to facilitate handled in a timely manner.
  adaptability in dynamic environments.         client attraction, current client overall
                                                                                            Mrs. Patterson is a results-driven
  At EPIC, Maggie plays a key role in           satisfaction, and Producer recruitment.
                                                                                            claims leader with extensive Workers’
  supporting Alexis Tolbert, Account            Prior to Joining EPIC, Brennen had similar
                                                                                            Compensation and Third Party Liability
  Executive, by assisting with day-to-day       responsibilities in both regional and
                                                                                            claims experience.
  client activities within EPIC’s Public Entity national Brokerage firms in New York,
  and Scholastic Practice. She is actively      South Carolina and Georgia. Brennen has Prior to joining the firm in December
  involved in managing client                   an intimate knowledge of the brokerage      2001, Chantelle spent five years in the
  communications, preparing policy              needs of clients on the Property and        risk management and insurance
  documents, and ensuring timely service Casualty business as well Employee                 industry. She routinely handles and
  delivery to meet client needs. Maggie’s       Benefits. Creating diversity in problem     manages large industrial, commercial
  ability to apply her educational              solving and creating complimentary          and Public Entity claims exceeding $2
  background to complex insurance               relationships among our business divisions. million. Chantelle’s focus has been on
  concepts allows her to provide exceptional Starting his career in 2000 at Liberty         managing claims and minimizing risks.
  support and contribute to the overall         Mutual, Brennen was immediately             Her experience includes Workers
  success of the team.                          provided an opportunity of learning and     Compensation, Crime, General
  Her strong organizational skills, attention practical insurance needs for customers       Liability, Property Damage,
  to detail, and commitment to client           across a broad spectrum of industry         Automobile Liability, Environmental
  satisfaction make her an invaluable           verticals and revenue volumes. Brennen is Liability, Third-party liability and
  resource within the Practice. Maggie holds a devoted husband and father – who             product liability claims.
  a Georgia Property and Casualty Insurance relishes the opportunities to spend time        Chantelle is a graduate of Georgia
  Agent’s License and continues to expand with his family while also incorporating his Southern University with a degree in
  her industry knowledge through ongoing personal interests of golf, fishing and            Business Management. Currently,
  professional development. She is              hunting to try and foster a balance in his  Chantelle is pursuing the Associate in
  dedicated to building long-term               life.                                       Claims (AIC) designation.
  relationships and delivering solutions that
  align with the unique needs of public
  entities and scholastic organizations.




                                                                                                                                       4
EPIC INSURANCE BROKERS SERVICE TEAM




       Michael Nischan, CDS, CCSP              Chris Mancillas, CIH, ASP SVP, Risk                  Mike Folmar, CSP, CEAS
   VP of Transportation & Logistics Risk       Control & Safety, Southeast Region                    Risk Control & Safety
                 Control                                                                                  Consultant
 Michael is responsible for the             Chris has more than 20 years of                Mike has more than 20 years of
 transportation risk control practice of    experience in the safety and health            experience in the health and medical
 EPIC’s Southeast operation. He has         arena. He is responsible for the risk          field. He provides mock OSHA
 more than 20 years of experience in law    control practice of EPIC’s Southeast           inspections/ comprehensive safety audit;
 enforcement, private industry              region. His team of seven safety               employee and management safety
 management, Public Entity risk control,    consultants and 3 administrators               training; safety procedures/program
 and consulting.                            provides mock OSHA inspections/                development; industrial hygiene surveys
 Michael helps motor carriers achieve       comprehensive safety audits; bilingual         including ergonomic evaluations, air
 and exceed regulatory requirements,        employee and management safety                 monitoring, noise assessments; and
 develops management and training           training; safety procedures/program            develops engineering controls.
 programs, implements operational           development; property liability                Mike spent 22 years working with
 controls to enhance efficiency and         assessments; industrial hygiene surveys        Concentra in various roles. He was
 educates all members of an organization    including ergonomic evaluations, air           responsible for evaluating and
 on compliance and security measures.       monitoring, noise assessments; and             rehabilitating injured workers. He then
                                            develops engineering controls.                 became the At-Work Consultant for
 Michael is a graduate of Lenoir-Rhyne
                                            Prior to joining the firm in 2000, Chris       Atlanta, conducting office and industrial
 College, with a degree in
                                            served five years as an OSHA                   ergonomic evaluations and developing
 Communication. He holds two NATMI
                                            Compliance Officer, inspecting various         ADA-compliant physical agility tests. As a
 certifications - Certified Director of
                                            companies in a wide array of industries.       Health and Safety Consultant, he
 Safety (CDS) and Certified Cargo
                                            He also worked for two years as a              conducted industrial hygiene surveys.
 Security Professional (CCSP).
                                            Radiation and Biological Safety specialist     Mike holds a Bachelor of Science degree
 Michael is a NATMI instructor and          for the East Carolina School of Medicine.      in Sports Medicine and Exercise
 provides professional certification and    Chris is a Certified Industrial Hygienist,     Physiology from Auburn University at
 training courses for transportation        an OSHA Authorized Trainer, a Certified        Montgomery and a Master of Science
 managers. He teaches compliance,           Forklift Trainer, a Certified Fire Sprinkler   degree in Occupational Health and
 management, accident investigation         Inspector, and a Certified Tower Climber       Safety from Columbia Southern
 and security principles. He has            & Rescue Trainer. He is a member of            University in 2007. Mike is currently
 instructed more than 200 companies         the American Industrial Hygiene                certified by the BCSP as Certified Safety
 from all over the United States            Association.                                   Professional (CSP). He is a
 including insurance firms, law firms and                                                  CEAS (Certified Ergonomic Assessment
                                            Chris is also fluent in Spanish.
 motor carriers.                                                                           Specialist), an OSHA Authorized Trainer.
                                                                                           He also holds several certifications and a
                                                                                           license in Sports Medicine.




                                                                                                                                        5
EXECUTIVE SUMMARY
 Edgewood Partners Insurance Center (EPIC) is pleased to represent DeKalb County School District (DCSD) in the ongoing oversight
 and placement of its cyber risk management and insurance programs. EPIC remains committed to assisting the District in protecting
 sensitive information, maintaining operational continuity, and safeguarding public trust in an increasingly complex digital
 environment.

 Entering the 2026 renewal cycle, the cyber insurance market reflects a more mature and disciplined operating environment than in
 recent years. After a period of significant volatility driven by ransomware severity and systemic losses, insurers have recalibrated
 pricing, strengthened underwriting standards, and re-entered the market with improved clarity around risk differentiation. As a
 result, capacity particularly in excess layers has expanded, pricing pressure has moderated, and underwriting focus has shifted
 toward governance, preparedness, and demonstrable cyber controls.

 DCSD’s underlying Cyber Liability coverage is provided through the APIP program, which may favorably as part of the broader
 property placement. This stabilization at the primary level has positively influenced excess markets, where competition has
 increased and attachment structures have become more flexible for well-managed public-sector risks.

 The Excess Cyber Liability market entering 2026 is characterized by improved stability, selective competition, and a continued
 emphasis on governance and preparedness. Public-sector insureds that demonstrate disciplined controls, vendor oversight, and
 incident readiness remain well positioned to access capacity and sustain favorable outcomes despite persistent threat activity.
 EPIC remains focused on aligning DCSD’s cyber insurance structure with these evolving market dynamics while supporting long-term
 resilience and fiscal predictability.

 The cyber liability marketplace entering the 2026 renewal cycle remains competitive; however, insurers continue to apply
 disciplined underwriting in response to persistent loss volatility. Ransomware events, social engineering and funds transfer fraud,
 third-party/vendor incidents, and the rapid emergence of artificial intelligence–related risk scenarios remain primary drivers of
 underwriter scrutiny. While market capacity is available, particularly in excess layers, carriers are differentiating risks more
 deliberately based on governance, control maturity, and preparedness.

 Based on current market conditions and for budgeting and planning purposes only, we are reflecting flat renewal indications at the
 excess layer. These indications are non-binding and subject to final underwriting review, market participation, and confirmation of
 terms.

 The District’s current excess cyber structure is reflected as follows:
 ✓ $2,000,000 excess limit of liability
 ✓ $0 retention at the excess layer

 At this stage, we do not anticipate reductions in coverage. As the renewal process progresses, we will continue to evaluate the
 marketplace for opportunities to maintain or enhance terms, where available, while preserving pricing stability and alignment with
 the District’s risk profile.




                                                                                                                                        6
EXECUTIVE SUMMARY
 Peer Benchmarking & Loss Severity Context
 In addition, the majority of EPIC’s K-12 public school district clients in Georgia maintain Excess Cyber Liability insurance,
 recognizing that cyber losses impacting school systems routinely extend beyond primary limits due to forensic costs,
 notification obligations, regulatory response, and extended system restoration timelines.

 Recent industry data further indicates that cyberattacks targeting K-12 school districts increased by approximately 30%
 year-over-year, reflecting both higher attack frequency and increased exploitation of third-party, credential-based, and
 social-engineering vulnerabilities. These trends continue to elevate loss severity even where strong controls are in place,
 reinforcing the role of excess cyber coverage in protecting against low-frequency, high-impact events.

 Loss Severity Benchmark
 Cyber loss benchmarking across the education and public-sector space demonstrates that while many cyber events are
 manageable within primary limits, material incidents involving ransomware, data misuse, or privileged access compromise
 frequently produce cumulative costs in the multi-million-dollar range, driven by overlapping response, recovery, legal, and
 regulatory requirements. Excess cyber insurance is therefore commonly structured to address severity risk, not volatility,
 above underlying coverage.

 Georgia Public-Entity Tiering Framework
 Peer public entities in Georgia have responded by adopting formal data-classification and cyber-risk tiering frameworks that
 align data sensitivity, security requirements, and cyber insurance limits. For example, peers utilize a tiered model that
 distinguishes between publicly available information and increasingly sensitive data environments:

 Cyber Data Environments, Loss Severity, and Limit Benchmarking:
 Lower-Tier / Public
 Data intended for public access or disclosure where compromise typically presents limited legal or operational impact. Loss
 activity at this tier is generally confined to investigation and remediation costs and is most often absorbed within primary
 cyber limits.
 Confidential Data
 Systems containing regulated or protected information, including student and staff personally identifiable information
 governed by FERPA and related statutes. Loss events impacting this data class routinely escalate beyond initial response costs
 and include regulatory notification, forensic analysis, credit monitoring, legal counsel, and extended recovery. Peer
 benchmarking indicates that total loss amounts for incidents involving regulated education data frequently reach or exceed $1
 million, prompting many K–12 districts to maintain combined primary and excess cyber limits of at least $5 million.
 Restricted or Highly Confidential
 Systems housing credentials, privileged access, vulnerability data, financial systems, or other high-risk operational assets
 represent the highest severity exposure. Breach events affecting these environments often result in multi-layer loss scenarios,
 including systemwide disruption, funds-transfer fraud, vendor-related liability, and prolonged operational recovery.
 Documented K–12 loss experience demonstrates that incidents in this tier can generate aggregate losses in the $2 million to
 $4 million+ range, reinforcing market practice favoring $5 million or higher total cyber limits, often structured through a
 combination of primary and excess coverage layers.
 Limit Considerations
 Consistent with peer K–12 public entities, cyber insurance limits are increasingly calibrated to loss severity rather than event
 frequency. Common limit structures observed in the education sector include total cyber limits of $3 million to $5 million, with
 higher limit options evaluated for districts with greater data concentration, vendor dependency, or financial transaction
 exposure. Excess Cyber Liability coverage is therefore maintained to provide protection against low-frequency, high-severity
 cyber events that materially exceed primary policy capacity.



                                                                                                                                    7
EXECUTIVE SUMMARY

 Why Excess Cyber Coverage Is Needed
 While not every cyber incident results in a multi-million-dollar loss, loss benchmarking across the K–12 education sector
 demonstrates that when incidents escalate, costs compound rapidly across multiple coverage triggers. Ransomware,
 funds-transfer fraud, vendor impersonation, and credential compromise routinely generate losses that exceed primary
 cyber limits when response costs, extended system restoration, regulatory obligations, and operational downtime
 converge.

 As cyberattacks against K–12 school districts have increased year-over-year, excess cyber insurance functions as
 severity protection, not redundancy, supporting financial resilience against low-frequency, high-impact cyber events that
 could otherwise create material budget disruption.

 Multiple authoritative sources show sustained year-over-year growth in cyber activity targeting public entities, particularly K–
 12 school districts and local governments.
 K–12 and education organizations experienced an average of 4,300–4,400 cyberattacks per organization per week in 2025,
 representing an increase of approximately 30%–31% year-over-year.

 82% of K–12 public entities reported experiencing at least one cyber incident over an 18-month period ending in late 2024,
 according to the CIS MS-ISAC analysis of more than 5,000 districts nationwide. North America saw some of the steepest
 growth rates, with education-sector cyber activity increasing by 60%+ in certain regions during peak attack periods such as
 back-to-school seasons.

 While attack volume has increased, impact has grown faster than frequency, driven by broader data exposure, vendor
 dependencies, and credential-based access.

 Incident                                                                                    Estimated Loss /
             Attack Type                               Impacted Entity (Public K–12)                             Loss Drivers
 Year                                                                                        Payout
                                                                                                                 Compromised
                                                                                                                 credentials;
                                                                                             $3.2M stolen        fraudulent wiring
             Business Email Compromise / Funds
 2026                                                  Large public school district (U.S.)   (partial recovery   instructions;
             Transfer Fraud
                                                                                             pending)            construction
                                                                                                                 vendor
                                                                                                                 impersonation [
                                                                                                                 Forensics, system
                                                                                                                 rebuild, incident
                                                       Multiple U.S. K–12 districts          $2.28M average
 2025        Ransomware + Network Restoration                                                                    response,
                                                       (aggregate data)                      recovery cost
                                                                                                                 operational
                                                                                                                 downtime
                                                                                                                 Extended
                                                                                                                 downtime, backup
                                                       Public K–12 school district           $3.76M recovery
 2024        Ransomware                                                                                          compromise,
                                                       (Midwest)                             cost
                                                                                                                 infrastructure
                                                                                                                 rebuild
                                                                                                                 Email
                                                                                                                 compromise;
                                                                                             $1.7M insurance
 2024        Cyber Theft / Funds Diversion             Public school district (Ohio)                             fraudulent
                                                                                             claim submitted
                                                                                                                 Financial
                                                                                                                 transaction
                                                                                                                 Instructional
                                                                                             $550K per day of    disruption,
                                                       U.S. schools & colleges (sector
 2023        Ransomware & Data Exposure                                                      downtime (12.6      recovery labor,
                                                       analysis)
                                                                                             days avg.)          response
                                                                                                                 coordination [
                                                                                                                                     8
EXECUTIVE SUMMARY

  EPIC will complete a full marketing of the District’s Excess Cyber Liability Insurance program with all viable
  insurance carriers as part of the upcoming renewal process.

  The information provided below reflects a summary of prior-year marketing efforts and is included for historical
  and illustrative purposes only. This information will be updated, refined, and finalized upon completion of the
  current renewal marketing and issuance of the final proposal.


 Carrier                                        Response


 Liberty Surplus Insurance Corporation          Quoted flat per expiring
 (Incumbent)
 AXA/ XL                                        Declined not able to compete with current rate/terms

 Zurich                                         Declined. Not within their appetite
 Resilience                                     Declined. Requires fully completed Cyber application as well as
                                                additional time to underwrite.
 Travelers                                      Declined. Not within their appetite.

 Coalition                                      Not Competitive. Would require at least a $500K SIR.




                                                                                                                     9
EXCESS CYBER LIABILITY


COMPANY:           Liberty Surplus Insurance Corporation                       POLICY TERM          07/01/2026 to 07/01/2027
POLICY #:          Renewal of EO6DACZMUQ003                                    PREMIUM:             $138,000 Pure Premium
                                                                                                    $ 350 Wholesale Broker Fee
                                                                                                    $5,534 Surplus Lines Tax (4%)
                                                                                                    $143,884 Total Premium




Retroactive Date: Follows APIP Cyber Underlying Policy
Coverage Form: Follow Form- Claims Made & Reported

Coverage & Limits: $2,000,000 Each Member Aggregate
                   $2, 000,000 Policy Aggregate

            Underlying             Layer        Insurer       Limits           Retention                Policy Period
            Insurance

                                   Primary      Beazley       $2,000,000       Follows APIP Cyber       07/01/2025 to 07/01/2026




            Sub- Limits (Per Member and Policy Aggregate                            Dedicated Limits In Excess of APIP Core

            Breach Response/ Notification Expense Costs                                      $500,000 (Non- Beazley Vendors)
                                                                                              $1,000,000 (Beazley Vendors)

            Business Interruption resulting from a System Failure                                       $500,000


            Dependent Business Interruption resulting from a Security Breach                            $750,000


            Cyber Extortion Loss                                                                        $750,000


            Data Recovery Loss                                                                          $750,000


            Business Interruption resulting from a Security Breach                                      $750,000


            Dependent Business Interruption resulting from a System Failure                             $100,000


            Fraudulent Instruction                                                                       $75,000


            Funds Transfer Fraud                                                                         $75,000


            Telephone Fraud                                                                              $75,000


            Computer Hardware Replacement (Bricking)                                                    $200,000

                                                                                                                                    1
                                                                                                                                    0
EXCESS CYBER LIABILITY

   Sub- Limits (Per Member and Policy Aggregate                            Dedicated Limits In Excess of APIP Core

   Invoice Manipulation                                                                           $100,000


   Reputation Loss                                                                                $200,000


   Claims Preparation Cots For Reputation Loss Claims Only                                           NIL


   Criminal Reward                                                                                   NIL


   Cryptojacking                                                                                     NIL




   Group 1 Sub-limits subject to Qualifiers:
   • Breach Response Costs
   • Business Interruption System Failure
   • Business Interruption Security Breach
   • DBI System Failure
   • DBI Security Breach
   • Cyber Extortion Loss
   • Data Recovery Costs
   • Computer Hardware Replacement
   • Reputational Loss
       -Group 1, As a condition precedent to the coverage specified in Group 1, the Insured must have satisfied the
      following conditions prior to the occurrence of such incident. Claim or Loss:
         a. Enforce Multifactor Authentication for all remote and privileged access
         b. Close all RDP ports if not in use
         c. If RDP ports are in use:
                1. Restrict RDP access by IP addresses via firewall rules and only allow trusted IP addresses to access the port
                2. Place all RDP services behind a VPN and protect them using Two- Factor Authentication



   Group 2 Sub-limits subject to Qualifiers:
   • Fraudulent Instruction
   • Telephone Fraud
   • Funds Transfer Fraud
   • Invoice Manipulation
      -Group 2, As a condition precedent to the coverage specified in Group 2, the Insured must have satisfied the
      following conditions prior to the occurrence of such incident, Claim or Loss:
       a. Provided formal training to employees with respect to computer crime and social engineering
       b. Required multiple forms of verification for all fund transfers and all changes to client, vendor or supplier details
       such as routing numbers, account numbers and phone numbers.


   Endorsements &              •   Sanction Limitation and Exclusion Clause-1
   Exclusions:                 •   Warranty Endorsement
                               •   Pending & Prior Litigation Endorsement
                               •   Following Specified Sublimit- With Conditions
                               •   Disclosure- Terrorism Risk Insurance Act


                                                                                                                                   1
                                                                                                                                   1
EXCESS CYBER LIABILITY


  NOTES        •   Quote terms, conditions, and premiums subject to change depending on
                   the APIP cyber program’s underlying aggregate program limit
               •   BI and DBI coverages subject to $750K aggregate sublimit, as per
                   underlying Beazley policy




                                                                                          1
                                                                                          2
TERMS AND CONDITIONS


   Coverage                                            Policy Period                           Premium


   Excess Cyber Liability ($2M xs $2M)      07/01/2026 to 07/01/2027                          $143,884

   Total                                                                                      $143,884




 Companies/ A.M. Best’s Rating                                                   Payment Plan

 Liberty Surplus Insurance Corporation/ A.M. Best Rated A (Excellent)            Paid In Full Upon Binding
 Financial Size Category: XV ($2 Billion Or Greater)




 The cost reflected below is an early indication of the renewal quotation expected to be received June 1st . Should the final
 quotation totals exceed that provided below, APIP is not bound by that which is reflected in this indication.


 NOTES:
 • This indication is based on the current loss experience, market conditions, increases in underwriting information and is
   subject to change if this insured’s loss ratio deteriorates further and/ or if the markets suffer a catastrophic event.
 • Coverage outlined in this Proposal is subject to the terms and conditions set forth in the policy.
 • Please refer to the Policy for specific terms, conditions and exclusions.




                                                                                                                                1
                                                                                                                                3
BUDGETARY ACKNOWLEDGMENT / AUTHORIZATION TO PROCEED



  EPIC Insurance Brokers & Consultants
  Attn: Danielle Joseph, Account Executive
  2405 Satellite Boulevard, Suite 200
  Duluth, GA 30096

  Re: Authorization to Proceed
  DeKalb County School District
  Excess Cyber Liability Insurance

  Dear Danielle:

  I have reviewed the renewal indication presented by EPIC on May 3, 2026. Based on the information provided, I
  approve the estimated budget for the insurance program and authorize EPIC to proceed with marketing and securing
  final terms, subject to final review and approval.




                   COVERAGE                                       POLICY PERIOD                  PREMIUM

              EXCESS CYBER LIABILITY                       JULY 1, 2026 TO JULY 1, 2027           $143,884




  Dr. Norman C. Sauce, III, Interim Superintendent of Schools                             Date
  DeKalb County School District




                                                                                                                     1
                                                                                                                     4