Business Insurance — What You Need and Why

Every business carries risk. The question is not whether risk exists but who bears it when something goes wrong. Business insurance transfers defined risks to an insurer in exchange for a premium. When a covered event occurs, the insurer pays rather than the business owner. For a new business with limited capital reserves, a single uninsured event can be catastrophic.

The figures are stark. Only 18% of South African small businesses carry insurance coverage, according to the FinScope MSME survey. The 2021 civil unrest demonstrated the consequence in concrete terms — businesses with SASRIA cover claimed R34 billion in damages and were able to rebuild; uninsured businesses in affected areas largely did not reopen. The 2022 KwaZulu-Natal floods produced the same pattern. Insurance is not a cost of doing business — it is the mechanism by which a business remains viable after a covered event that would otherwise be terminal.

How to Think About Insurance

Before selecting insurance products, assess your actual risk profile rather than buying generic cover. For each significant risk the business faces, work through three questions: how likely is it to happen, what would it cost if it did, and can the business absorb that cost from operating cash flow?

The risks that are both high-cost and impossible to absorb from cash flow are the ones that must be insured. The risks that are low-cost and easily absorbed do not require insurance — the premium exceeds the expected loss. The risks that are high-cost but highly unlikely are the ones where insurance is most valuable, because the premium is low relative to the potential exposure.

Do not insure risks the business can self-fund. Do insure risks that would close the business.

SASRIA: The Most South African Insurance You Cannot Ignore

SASRIA (South African Special Risks Insurance Association) is a state-owned insurer that provides cover for damage caused by riots, strikes, public disorder, and political violence — risks that commercial insurers specifically exclude from their standard policies. SASRIA cover is not optional for any South African business with physical assets or premises.

South Africa's history of civil unrest, rolling protests, and community disruptions means the events SASRIA covers are neither remote nor theoretical. The July 2021 unrest destroyed or damaged businesses across KwaZulu-Natal and parts of Gauteng on a scale that would have permanently closed thousands of businesses without SASRIA cover.

SASRIA cover is not purchased directly from SASRIA. It is added as an extension to your existing property or business interruption policy through your insurer or broker. When you buy commercial property or assets insurance, ask explicitly whether SASRIA cover is included. If it is not, add it. The premium is modest relative to the risk.

SASRIA updated its rates in October 2025. Confirm with your broker that your cover and the sums insured remain adequate at renewal and that the SASRIA premium is reflected correctly on your schedule.

Property and Assets Insurance

If your business owns or leases premises, equipment, stock, or other physical assets, property insurance protects against loss or damage from fire, theft, flooding, and other covered perils.

Replacement value vs market value. The most important decision in a property policy is whether assets are insured at replacement cost (what it would cost to buy new) or market value (what the asset is currently worth). For business equipment and stock, replacement cost cover is almost always preferable — market value may not be sufficient to replace what was lost and resume trading. Underinsurance is the most common reason commercial claims are paid at less than expected.

Reinstatement and escalation. If property values are not updated annually, inflation creates underinsurance over time. Many policies include automatic escalation clauses, but these may not keep pace with actual replacement cost increases. Review your insured values annually with your broker.

Load shedding and power surge cover. This is a specific South African risk that standard property policies may not cover automatically. Equipment damage caused by power surges, voltage fluctuations, or the restoration of power after load shedding has been a significant source of loss for South African businesses. Confirm explicitly whether your policy covers this — it is not universal, and the exclusion is common in standard commercial policies. Surge protection devices reduce premium cost and claims risk.

Goods in transit. If your business moves stock or goods — by any means, including your own vehicles — goods in transit cover protects against loss or damage during transportation. Standard property policies cover goods on your premises; goods in transit is a separate extension.

Business Interruption Insurance

Business interruption (BI) insurance covers lost income if your business cannot operate due to a covered event — fire, flood, theft, or other physical damage to your premises or assets. For businesses that depend on specific equipment, premises, or staff, this can be the difference between surviving a crisis and closing permanently.

BI cover does not activate on its own. It is typically triggered by physical damage that causes the business to close or reduce operations. The policy pays for the revenue the business would have earned during the interruption period, up to the policy limit and indemnity period.

The indemnity period — the maximum time the insurer will pay — is the most critical design decision in a BI policy. Most small business BI policies offer 12-month indemnity periods as standard. In practice, a serious fire or flood can take 18 to 24 months to resolve — rebuilding, sourcing replacement equipment, and rebuilding a client base all take time. A 12-month indemnity period that runs out before the business resumes full trading leaves the owner exposed for the remainder. Consider whether a 24-month indemnity period is appropriate for your specific business.

What BI does not cover. Standard BI policies cover loss of revenue following a covered physical event. They do not cover revenue loss from a pandemic, a market downturn, a supplier failing, or a client cancelling — unless specific extensions are purchased. Load shedding-related business interruption is generally excluded unless specifically included as an extension. Confirm what yours covers explicitly.

Professional Indemnity Insurance

Professional indemnity (PI) insurance covers you if a client claims financial loss as a result of your advice, service, or work product. For any business providing professional services — consulting, legal advice, accounting, architecture, engineering, marketing, financial planning, IT services — PI insurance is essential. Many corporate clients and government entities require proof of PI cover before engaging an independent supplier.

In a professional services context, the potential claim can be many times the fee charged. A consultant who provides advice that a client follows and loses R5 million on can face a claim for that loss regardless of the fee paid. The corporate veil offers limited protection — if the advice was given negligently and the claim is substantial, litigation will follow regardless of what the contract says about limitation of liability.

Claims-made cover. PI insurance is almost universally structured as claims-made cover, not occurrence-based cover. This means the policy covers claims made during the policy period, not claims arising from events during the policy period. If a client raises a claim six months after your policy lapses, you have no cover — even if the work was done while the policy was active.

The practical implication is critical: if you wind down your practice, retire, or change insurers, you need run-off cover to protect against claims arising after the policy lapses. Run-off cover extends the claims-made period for a defined time — typically two to five years — after the policy ends. Do not allow your PI policy to lapse without arranging run-off cover.

Sector-specific requirements. Certain regulated professions require minimum PI cover as a condition of registration — attorneys, accountants, engineers, architects, and others. Check your professional body's minimum cover requirements and ensure your policy meets or exceeds them.

Public Liability Insurance

Public liability insurance covers injury to a third party or damage to their property caused by your business activities. It is essential for any business that operates from premises, visits client sites, or interacts with the public in any way.

The Consumer Protection Act places strict liability on businesses for harm caused to consumers during the provision of services. Negligence does not need to be proven — only that the harm occurred in the course of the business activity. Public liability insurance covers the legal costs of defending a claim and the damages if the claim succeeds.

Directors' personal liability. Public liability policies typically cover the company. Directors are personally exposed under the Companies Act for certain acts. If this exposure is material for your business, consider a separate directors' and officers' (D&O) liability policy, which covers directors and officers personally for claims arising from their management decisions.

Product Liability Insurance

Product liability covers harm caused to a consumer by a product you sell, import, or manufacture. The Consumer Protection Act 68 of 2008 imposes strict liability across the entire supply chain — manufacturer, importer, distributor, and retailer can all be liable for a defective product. A consumer does not need to prove negligence; they need only to prove that the product was defective and caused the harm.

This has direct implications for businesses that import goods, white-label products, or distribute products they did not manufacture. You are in the supply chain. If the product is defective and causes harm, you are exposed regardless of where the defect originated.

Product liability cover is particularly important for food and beverage businesses, businesses selling physical products to consumers, and importers of goods from any source.

Cyber Insurance: No Longer Optional for Most Businesses

Cyber insurance is the fastest-growing category of business insurance in South Africa and one of the most underinsured risks in the SME sector. The data is unambiguous. South Africa ranks first in Africa for ransomware and infostealer activity, accounting for over 40% of incidents on the continent. The average cost of a data breach in South Africa in 2025 is estimated at R53.1 million. Ransomware payouts frequently exceed R2 million for SMEs. Check Point Research reports over 2 100 attacks per organisation per week in South Africa, up 14% year on year.

For any business that holds client personal information, processes payments, stores financial data, or relies on digital systems to operate, a cyber incident is a genuine existential risk.

What cyber insurance covers:

Ransomware and extortion — costs of responding to a ransomware attack, including negotiation costs, ransom payments where insurer-approved, and system restoration. First-party data breach — notification costs, credit monitoring for affected individuals, regulatory fines, and public relations costs following a breach. Business interruption from a cyber event — revenue loss during system downtime caused by an attack. Third-party liability — claims from clients or third parties whose data was compromised.

POPIA exposure and cyber insurance. The Protection of Personal Information Act imposes fines of up to R10 million for material data breaches, with personal criminal liability for executives in severe cases. Cyber insurance that includes regulatory fine cover (where insurable by law) and incident response support is directly relevant to any business holding client personal information.

What insurers require before issuing cover. Cyber underwriting has tightened significantly in the South African market. Insurers increasingly require evidence of specific security controls before issuing cover, and misrepresentation of controls at application can void a claim. Minimum requirements now typically include multi-factor authentication across all access points (email, cloud, VPN), endpoint detection and response software, tested offsite backups, and a written incident response plan. Confirm what your insurer requires and close any gaps before applying.

Key Person Insurance

Key person insurance is life insurance or disability cover taken out by the business on the life of a critical individual — the founder, a key salesperson, a specialist whose departure would materially damage the business. The proceeds are paid to the business, not to the individual's estate, and are intended to fund the cost of replacing the key person or absorbing the revenue loss their departure causes.

For many small businesses, the founder is the entire business — their relationships, their skills, and their reputation generate virtually all of the revenue. Their death or permanent incapacitation without key person cover can be fatal to the business regardless of its underlying health.

Key person cover is distinct from the founder's personal life insurance or disability cover, which protects the founder's estate and dependants. Both are needed and serve different purposes.

Business Travel Insurance

If you or your employees travel for business, personal travel insurance does not cover business-related losses — laptops, business equipment, professional liability arising from advice given while travelling, or business interruption from a medical emergency. Business travel insurance covers these gaps.

For frequent business travellers, an annual multi-trip policy is typically more cost-effective than per-trip cover and ensures no trip is accidentally uninsured.

Employer Insurance Obligations

Two insurance-related obligations apply to every employer, regardless of business size.

COIDA registration is mandatory for all employers and provides cover for workplace injuries and occupational diseases. It is not optional and is not the same as private employer's liability insurance. See the COIDA article for full detail on registration, the annual Return of Earnings, and the 2026 regulatory updates.

Group life and disability cover is not legally required but is standard in most employment packages above a certain seniority level and may be required by your employment contracts or industry norms. Check your employment agreements before assuming you have no obligation.

What to Look for in a Broker

Insurance in South Africa is purchased through brokers who are licensed under the Financial Sector Conduct Authority (FSCA). A broker is legally required to act in your interest, not the insurer's.

A good commercial broker for an SME should understand the specific risks of your business sector, recommend appropriate cover levels rather than minimum cover, ensure SASRIA cover is always included for businesses with physical assets, review your policy annually and after any material business change, explain exclusions clearly — not just what is covered, but what is not, and help you understand the claims process before you need it.

Avoid comparison websites for commercial business insurance. The complexity of commercial policies — particularly the interaction between the insured values, exclusions, sub-limits, and conditions — requires human judgement, not an algorithm.

Common Mistakes Worth Avoiding

Not including SASRIA cover. In South Africa's operating environment, this is not a remote risk. It is a near-certainty over a long enough operating period in many locations. SASRIA is cheap and essential.

Underinsuring assets at market value rather than replacement cost. Settling a claim at market value for equipment that costs significantly more to replace new means you cannot resume operations from the proceeds. Insure at replacement cost.

Letting PI insurance lapse without arranging run-off cover. Claims-made policies protect you only if the policy is active when the claim is made. A lapsed policy with no run-off cover means a claim arising from past work is uninsured.

Not confirming load shedding and power surge cover. This is an SA-specific exclusion in many standard policies. Surge protection devices help, but explicit cover is the only guarantee.

Not updating insured values annually. Inflation erodes the adequacy of insured values every year. Underinsurance at the time of claim means a proportional reduction in the settlement — not a full payout.

Misrepresenting security controls on a cyber application. Insurers are conducting more detailed underwriting, and material misrepresentation can void a claim. Disclose accurately and close gaps before applying.

Assuming personal insurance covers business use. Personal vehicle insurance, travel insurance, and personal liability policies typically exclude business use. Business activities require business policies.

Not reading policy exclusions before a claim. Read the exclusions section before purchasing, not after a claim is denied. The exclusions define what the policy does not cover and are as important as the cover section.

This article provides general information about business insurance options in South Africa. Insurance products are complex and the detail of cover, exclusions, and conditions varies between insurers and policies. Engage a qualified FSCA-licensed short-term insurance broker for advice specific to your business. Nothing in this article constitutes insurance or financial advice.

Professional advice recommended

This topic involves legal, tax, or regulatory complexity that varies by individual circumstances. The information here is general guidance only. Consult a qualified professional before making decisions specific to your situation.

This article provides general information about South African business law and regulation. It is not legal, tax, or financial advice. Laws and regulations change — verify current requirements with a qualified professional or directly with the relevant authority before making decisions.

Related articles