Business Insurance, Explained: What Each Policy Actually Covers

Business insurance is sold as a stack of separate policies because the perils are separate: a customer slipping on your floor, a client claiming your advice cost them money, a ransomware event, a fire, a lawsuit over employment practices — each belongs to a different contract with different exclusions. Owners who buy one policy and assume coverage discover the boundaries only at claim time, which is the most expensive possible curriculum. Orer News publishes information, not insurance advice; an independent broker earns their fee exactly here.

The core mental model: liability policies pay others for harm you cause; property policies pay you for things you lose; and the fastest-growing categories — cyber and employment practices — cover the claims owners most often assume are already included.

What does general liability cover?

Bodily injury to third parties on your premises, property damage you cause to others, and some personal and advertising injury such as defamation in marketing. What it does not cover: your employees' injuries on the job — that is workers' compensation, which is mandatory in nearly every state; damage to your own property — that is commercial property coverage; and financial harm from your professional services — that is professional liability. The BOP bundle — property plus general liability in one package — is the standard small-business starting point.

What is professional liability?

Errors and omissions coverage for claims that your work, advice, or negligence caused financial loss: the consultant's flawed recommendation, the agency's missed deadline, the designer's copyright infringement. It is claims-made in most forms — covering claims made while the policy is in force, which is why retroactive dates and tail coverage matter when you switch insurers or close a business. Any business selling expertise needs it; general liability's silence on professional harm is categorical.

What about cyber and employment coverage?

Cyber policies cover breach response costs — forensics, notification, credit monitoring, legal defense, and in some forms ransom and business interruption from system downtime. The coverage gap to check: social-engineering fraud, where an employee is tricked into wiring money, is often an exclusion or a sublimit requiring a specific rider — precisely the loss event most likely to hit a small firm. Employment practices liability covers claims of discrimination, harassment, and wrongful termination beyond defense costs your general policy excludes; any business with employees and any turnover has the exposure, since defense costs alone are the claim's main weight.

Which supporting policies matter at what stage?

Workers' compensation from the first employee — statutory, with employer liability alongside. Commercial auto where vehicles are used, including hired-and-non-owned auto for employees driving their own cars on business — an exposure the personal auto policy excludes. Business interruption as a property-policy add-on, with the coverage period and extra-expense terms worth reading carefully. Key-person insurance where one person's death would strain the business financially. Umbrella liability once underlying limits matter. And directors and officers coverage once there is a board or outside investors.

Insurance is a portfolio of boundaries. The useful annual exercise is a one-page exposure map — premises, services, data, employees, vehicles — checked against the policy stack, so every category has a named home or a conscious decision to self-insure it.