$5M Professional Liability (E&O) Insurance for Managed Service Providers (MSPs)

For MSPs whose enterprise contract (MSA) requires $5M, Professional Liability (E&O), usually Technology E&O, is often built as a primary policy plus follow-form excess layers.

What does a $5M requirement mean for MSPs?

Professional Liability (E&O, short for Errors and Omissions) covers claims that a mistake in your services cost a client money. MSPs usually need Technology E&O (E&O written for IT services work). It is often sold with Cyber (coverage for data breaches and ransomware). A $5M clause in an enterprise MSA (master service agreement) may read like this:

• Per claim and aggregate: the most paid for one claim, and for all claims in a policy year.
• Claims-made: Professional Liability almost always covers claims made and reported while the policy is active, for work done after the retroactive date (the earliest date of work the policy covers).
• Three years after the MSA ends: you would usually renew every layer, with the same retroactive date, for that period.
• Primary plus excess: the last sentence lets you stack policies. If yours does not, confirm with the client that primary plus follow-form excess meets the clause.

Who asks MSPs for $5M?

Most small MSPs carry $1M, and $2M is a common step up when a larger client asks. A $3M clause is less common. $5M comes up when one mistake could hit a large business, and a $10M clause is rarer still:

• Large enterprises with a standard vendor MSA (see MSA requirements).
• Banks, credit unions and insurers that give you admin access to customer data systems.
• Hospital systems and health plans where downtime affects patient care.
• Government agencies and prime contractors, where the limit is often written into the bid.

How is $5M built?

A primary policy pays first. An excess policy pays only after the layer below it is used up. "$3M xs $2M" means a $3M layer above the first $2M. Stacked layers are called a tower.

Each excess layer should follow form, meaning it uses the primary policy's terms. Every layer should share the same retroactive date, policy period and named insured (the business the policy covers), so there is no gap. Many policies pay defense costs (legal fees) inside the limit, so they can use up the $5M. A commercial umbrella almost never covers Professional Liability.

What will underwriters ask for?

Underwriters decide whether to offer coverage. Each insurer in the tower may ask its own questions.

• Revenue by service: help desk, monitoring, backup, cloud, security and migrations.
• Number of clients and devices you manage (endpoints), and largest clients by industry.
• How you secure remote management and ticketing tools: multifactor login, admin rights and who can push changes to clients.
• Change control, rollout testing, and backup and restore checks.
• The MSA requiring $5M, uptime promises and any limitation of liability clause (a cap on what you owe a client).
• Three to five years of loss runs (a report of past claims), your current policy and retroactive date.

What affects the cost?

• Services and clients. Security services, admin access to financial or patient systems and large clients usually raise it.
• How the $5M is built. The primary layer usually costs the most per $1M. Excess layers usually cost less per $1M.
• Your own controls. Strong login security and tested backups may help.
• Cyber in the package. Adding Cyber usually adds cost.
• Retention and claims history. Retention is the amount you pay before the policy pays, much like a deductible. Past claims can shrink the limit offered.

Frequently asked questions

Do I need $5M Professional Liability as an MSP?

Usually only if a client contract requires it, as enterprise, bank, healthcare and government clients often do. Whether a smaller MSP can get $5M depends on underwriting, and carriers may offer a lower limit or only part of the $5M.

Is $2M enough if my MSA says $5M?

Usually not. A $2M policy on its own does not reach a $5M limit, and your contract's wording controls. Request new quotes through Morrow for a $5M primary or a primary with follow-form excess layers. Report any known incident to your current carrier before switching.

Can my client be added as an additional insured on my MSP's Professional Liability?

Usually not. A standard Technology E&O policy covers you, not your client, and clients usually cannot be added as an additional insured on Professional Liability. Some clients may accept a certificate of insurance (proof of coverage) listing every layer instead. Send Morrow your contract wording and Morrow can review it.

What could a $5M claim against an MSP look like?

A $5M claim could come from one failed change at a large client. Hypothetical example: a failed server migration corrupts a regional bank's records.

This article is general information, not legal advice or a coverage determination. Coverage depends on the actual policy wording, carrier underwriting and your contract terms.