Insurance is one of those expenses that feels like a waste right up until the moment you need it. And when that moment arrives, too many small business owners discover they’re underinsured, uninsured for the specific event, or holding a policy with exclusions that make the claim worthless.

The pattern repeats: the owner buys a standard policy at startup, sets it to auto-renew, and doesn’t look at it for years. The business grows and changes shape, but the insurance stays frozen. Then something goes wrong.

Public Liability Gaps

Most small businesses have public liability insurance. Fewer have reviewed the details recently.

Aggregate vs per-occurrence limits. Your policy might state $10 million, but is that per occurrence or in aggregate? If it’s aggregate, multiple claims draw from the same pool. Two $3 million claims on a $10 million aggregate leave you with $4 million remaining.

Product liability exclusions. Standard public liability often excludes claims from products you sell. If you manufacture or retail physical products, you may need separate product liability coverage. A customer slipping on your floor is public liability. A product you sold injuring them may require coverage that isn’t included by default.

Professional services exclusions. If you provide advice or consulting, losses arising from that professional work may require a separate professional indemnity policy that public liability won’t cover.

Cyber Insurance: The Gap Most SMBs Miss

According to the Insurance Council of Australia, fewer than 20% of Australian SMBs have dedicated cyber coverage. The Australian Cyber Security Centre reported that small businesses accounted for 43% of cybercrime reports in 2024-25, with average losses exceeding $46,000 per incident.

Standard business insurance typically won’t cover ransomware recovery costs, data breach notification expenses, or business email compromise losses. A standalone cyber policy is worth discussing with your broker if you handle customer data or rely on digital systems.

Business Interruption: The Devil in the Details

Business interruption (BI) insurance covers lost income when an insured event forces you to stop operating. The details determine whether it pays out.

The insured event trigger. BI coverage only activates when the interruption is caused by an event covered under your property policy. If your property policy excludes flood, a flood that shuts you down won’t trigger BI cover either.

Indemnity period. This is how long the policy pays out. Common periods are 12-24 months. After the 2019-20 bushfires, many rural businesses discovered 12-month periods were insufficient for actual recovery timelines.

Underinsurance. BI coverage should reflect current revenue. A business that’s grown 40% since the policy was set is 40% underinsured. Most policies include an “average clause” that proportionally reduces payouts if you’re underinsured.

Workers’ Compensation Gaps

Workers’ comp is compulsory, but compliance doesn’t mean coverage is complete.

Subcontractor classification. If subcontractors are later deemed employees by the relevant authority, you may face backdated premiums and penalties. The Safe Work Australia guidelines on the employee-contractor distinction are worth reviewing.

Director coverage. In some states, working directors are automatically covered. In others, they need to explicitly opt in. If you do physical work in your business, check whether you’re covered under your own policy.

How to Audit Your Coverage

Read the PDS and schedule. The Product Disclosure Statement explains coverage and exclusions. The schedule specifies your limits. Both together define actual coverage.

Compare to current operations. Has revenue changed significantly? Have you added services, products, or locations? Any material change not reflected in your insurance is a potential gap.

Ask about specific scenarios. Don’t ask “am I covered?” in general terms. Ask: “If a customer’s data is breached, am I covered? If a flood closes my premises, am I covered?” Specific questions get specific answers.

Review annually. Set a date separate from renewal — perhaps at financial year end — to evaluate your insurance against current operations. Renewal time, when you’re under pressure to just sign, is the worst time to review.

Insurance isn’t exciting. Neither is discovering you don’t have it when you need it. A few hours of attention each year can prevent the kind of uninsured loss that turns a bad event into a business-ending one.