Glossary
Dependent business interruption
Cyber coverage for income lost when an outage or attack at a provider you rely on, such as a cloud host or payment processor, halts your operations.
Also called: DBI, dependent system failure, cyber contingent business interruption
Dependent business interruption (DBI) is the cyber policy's counterpart to contingent business income. It pays lost income and extra expense when a technology provider you depend on, such as a cloud host, payment processor, software vendor or managed service provider, goes down, and your own network was not the target.
Two questions decide the coverage. First, which providers count: many policies cover IT providers and treat other suppliers separately, and some require them to be scheduled by name. Second, what kind of event: a security failure, such as a breach or malware at the provider, versus a system failure, an unintentional outage such as a faulty software update. Whether system failure is included, and at what sublimit, varies. A waiting period of several hours commonly applies before the loss starts counting.
The July 2024 CrowdStrike outage showed the scale. CyberCube estimated insured losses from it between $400 million and $1.5 billion.
Read the definition of "dependent business," the list of covered events and the waiting period before you rely on it. cyber business interruption and dependent system failure and System failure, cloud outages and the CrowdStrike lesson cover the scenarios, and contingent business income is the property-policy version.
Last reviewed October 10, 2026