Dependencies on outsourced services introduce contingent risks; insurers expect due diligence and oversight. Failures in outsourced services that cause cyber losses may be covered as contingent business interruption, but policy terms may scrutinise the contractual resilience and provider’s controls.