Specialized insurance markets can respond to war, terrorism and political violence exposures that standard property programs may exclude.
Political violence can threaten operations, physical assets, revenue continuity and human life at the same time.
The appropriate structure depends on the peril, geography, concentration of values and consequences of interruption. Descriptions below summarize market materials only.
Standalone protection for physical damage and resulting business interruption from defined perils.
Terrorism-only structures for organizations seeking options beyond or alongside TRIPRA participation.
Coverage structured around a malicious physical attack at or near an insured location.
Non-damage business interruption options when a nearby incident or credible threat reduces access or attendance.
Liability protection arising from terrorism events, subject to the definitions and conditions of the policy issued.
Specialist protection for chemical, biological, radiological and nuclear terrorism or malicious acts.
Organizations with complex portfolios, international operations and material time-element exposure.
Owners and operators of high-value or high-occupancy commercial assets.
Organizers responsible for temporary sites, public access and significant revenue concentration.
Hotels, resorts and destination properties affected by access, attraction and occupancy risk.
Stadiums, arenas, leagues and operators with concentrated audiences and scheduled operations.
Venues, festivals and operators exposed to interruption, liability and public-safety consequences.
UK-specific terrorism protection concepts may address qualifying premises and events. Current statutory duties, commencement dates and compliance requirements should be confirmed through official UK guidance and qualified counsel.
A focused submission gives specialty markets the information required to evaluate exposure and formulate terms.
Document locations, values, operations, concentrations of people, revenue at risk, security posture and relevant loss history.
Review existing property, business interruption and liability programs against the perils and consequences under consideration.
Subject to licensing, market access and underwriting, seek available structures and compare actual forms, limits, exclusions, deductibles and price.
Three fact-checked briefings on the public frameworks and private-market structures shaping terrorism and political violence risk.
After September 11, 2001, private insurers largely withdrew terrorism coverage from commercial policies. Congress answered with the Terrorism Risk Insurance Act of 2002 (P.L. 107-297), a federal backstop in which the government shares insured terrorism losses with private insurers above defined thresholds. The program has been reauthorized four times, in 2005, 2007, 2015, and 2019, and the current authorization runs through December 31, 2027.
Two extension bills moved in 2026 but neither is law as of this writing. H.R. 7128, reported as introduced by Representative Mike Flood of Nebraska, passed the House on June 29, 2026 (373 to 15, according to press reports). S. 4395, sponsored by Senators McCormick, Smith, Tillis, and Gallego, was advanced unanimously by the Senate Banking Committee on September 17, 2026. The House bill would extend the program through 2034; the Senate bill is described in press reports as a clean extension to the same date, though its text has not been independently confirmed. The House version would raise the certification threshold from $5 million to $10 million for acts occurring in 2029 or later and add Treasury certification transparency requirements, including Federal Register notice within 30 days of a review beginning, a determination within 90 days (extendable to 365 days), a public final determination, and annual reporting to Congress. The chambers must reconcile the two before enactment.
Federal loss-sharing under the program turns on certification. A violent act dangerous to human life, property, or infrastructure qualifies when the damage occurs within the United States (or to US aircraft, vessels, or diplomatic missions) and is committed by an individual or individuals as part of an effort to coerce the civilian population of the United States or to influence the policy or affect the conduct of the United States Government by coercion. The original 2002 statute limited certification to acts by or on behalf of a foreign person or foreign interest; the 2007 reauthorization removed that limitation, so qualifying domestic acts are covered. The Treasury Secretary certifies the act in consultation with the Secretary of Homeland Security and the Attorney General. That certification authority is non-delegable and is not subject to judicial review.
Two loss thresholds must then be met. The single attack must cause more than $5 million in property and casualty insurance losses, in the aggregate, for certification, and aggregate industry insured losses from the certified act must exceed $200 million in the program year, the program trigger, before federal sharing begins.
Each insurer's deductible equals 20 percent of its prior-year direct earned premiums in TRIP-eligible lines. Above the deductible and the $200 million trigger, the federal government pays 80 percent of covered losses and the insurer retains a 20 percent copay. Aggregate federal plus insurer payments are capped at $100 billion per year; beyond that cap there are no federal payments, and no insurer that has met its deductible is liable for the excess portion. After federal payments, recoupment distinguishes two cases: mandatory recoupment requires the Treasury Secretary to impose surcharges on TRIP-eligible commercial property and casualty policies to recover 140 percent of the difference between the aggregate retention amount and unreimbursed insured losses, while discretionary recoupment can reach all remaining federal outlays but is capped at a 3 percent surcharge with no 140 percent multiplier.
The program covers commercial property and casualty lines, including excess and umbrella coverage, workers' compensation, and directors and officers liability. Twelve lines are statutorily excluded: federal or private crop insurance; private mortgage or title insurance; monoline financial guaranty; medical malpractice; health or life insurance; federal flood insurance; reinsurance and retrocessional reinsurance; commercial automobile; burglary and theft; surety; professional liability; and farm owners multiple peril.
Insurers must make terrorism coverage available on terms not materially different from coverage for other perils, though policyholders are not required to buy it. Workers' compensation terrorism coverage cannot be excluded.
No attack has ever been certified under TRIA, so the federal government has never paid a claim under the program. Take-up rates run from 60 percent to nearly 80 percent. Total TRIP-eligible premiums were $314.1 billion in 2024, and insurers collected an estimated $68.3 billion in terrorism premiums from 2003 through 2023.
The practical consequence is worth stating plainly. TRIA provides a federal backstop for large, certified attacks. It does not respond to smaller events, attacks that fail certification, or losses below its thresholds. Organizations measuring their exposure should understand both what the backstop promises and where its boundaries lie, and confirm program status through official sources and qualified counsel before making decisions.
Editorial note: the House vote tally (373 to 15), the House bill's sponsor, and the Senate bill's full text are reported in press and official releases rather than confirmed directly on Congress.gov; the article hedges them accordingly. Bill statuses were current as of late September 2026 and should be rechecked before republication.
Published September 28, 2026. This article is for informational purposes only and is not insurance advice, legal advice, or an offer of coverage. Program details above reflect public sources current as of late September 2026.
Many organizations assume the federal terrorism backstop described in our earlier article is the whole of terrorism insurance. It is not. A private standalone market for war, terrorism, and political violence (WTPV) has grown alongside the federal program, and the two serve different purposes. Understanding how they fit together is the starting point for any serious coverage decision.
TRIA's federal machinery engages in stages. First, the Treasury Secretary must certify the attack as an act of terrorism, which requires more than $5 million in property and casualty insurance losses, in the aggregate, from that single attack. Second, federal cost-sharing with insurers begins only when aggregate industry insured losses from certified acts exceed $200 million in the program year; below that trigger, insurers pay certified terrorism losses themselves, with no federal reimbursement. A standalone policy uses its own definition of terrorism. Carrier and broker materials describe those definitions as typically covering an act committed for political, religious, ideological, or similar purposes, with no government certification required. Congress is considering H.R. 7128, which would extend TRIPRA to 2034 and raise the certification loss threshold to $10 million beginning in 2029; it had not become law as of late September 2026.
That distinction matters because no attack has ever been certified under TRIA. An organization relying solely on the federal framework is relying on a mechanism that has never once been triggered.
Carrier materials (for example, AXA XL's WTPV product literature) describe standalone political-violence coverage as extending to perils such as war, civil war, insurrection, rebellion, revolution, strikes, riots, civil commotion, malicious damage, and sabotage, which fall outside TRIPRA's certified-terrorism scope. Carrier comparisons note that certification under TRIA has no statutory time limit, which can delay payment, while standalone payment follows the policy's own triggers rather than a government timetable. Broker literature notes growing interest in covering non-traditional terrorism risks such as CBRN and large-scale cyber terrorism through standalone structures; the Congressional Research Service notes that the TRIA statute is generally silent on cyberterrorism, and that nuclear, chemical, biological, or radiological (NCBR) events may not result in full coverage under TRIP where underlying policies exclude them.
Carrier materials describe the scale available. AXA XL's WTPV product, for example, describes capacity up to $250 million per occurrence on a worldwide basis, with deductibles from $1,000 to $1 million, subject to underwriting and the actual policy form. Market activity in 2026 illustrates the range: The Fidelis Partnership launched a political violence and terrorism consortium, placed by Guy Carpenter, that went live on June 1, 2026, able to deploy up to $47.5 million per risk in the Middle East and up to $345 million per risk globally. This is a market example reported in the trade press, not an indication of any particular organization's available terms.
Four reasons recur in broker and carrier literature. First, certainty: coverage without certification risk. Second, scale: protection for smaller or lone-wolf events that would never be certified under TRIA. Third, geography: worldwide scope, including regions the federal program does not touch. Fourth, control: tailored limits and deductibles set independently of the underlying property premium.
The two are not mutually exclusive. Treasury data cited by the Congressional Research Service found that 74 percent of standalone terrorism policies written in 2024 were TRIP-eligible, meaning much of the standalone market sits inside the federal backstop rather than outside it. Many buyers layer standalone structures over or beside their TRIPRA participation, using each for what it does best.
One caution on market conditions: a September 2026 trade-press report characterized 2026 as the private WTPV market's worst underwriting year in more than two decades. That is a single press characterization, not primary data, and we flag it as unverified rather than repeat it as fact. Organizations evaluating the market should rely on current broker intelligence and actual quotations, not headlines.
The decision between TRIPRA reliance, standalone structures, or a layered combination turns on an organization's locations, concentrations of value, threat profile, and tolerance for certification risk. It is a decision for qualified brokers and counsel, made with actual policy forms in hand.
Published September 28, 2026. This article is for informational purposes only and is not insurance advice, legal advice, or an offer of coverage. Product descriptions summarize carrier marketing materials and public sources current as of late September 2026; they are not quotes or promises of terms.
The Terrorism (Protection of Premises) Act 2025, known as Martyn's Law, received Royal Assent on April 3, 2025. Named for Martyn Hett, one of the 22 victims of the 2017 Manchester Arena bombing, it applies across England, Wales, Scotland, and Northern Ireland (Part 2, on licensing disclosure of premises plans, extends to England, Wales, and Scotland only). It will impose preparedness duties on qualifying premises and events. The critical point for owners and operators, as of late September 2026: the substantive duties are not yet in force, and there is currently no legal duty to comply.
At Royal Assent, only Part 3 (General) and the regulation-making powers in Parts 1 and 2 commenced (section 37). The licensed-premises information disclosure provisions are Part 2, and did not substantively commence at Royal Assent. Section 27, the guidance power, was commenced on April 10, 2026 by the Commencement No. 1 Regulations 2026 (SI 2026/320, made March 18, 2026). Commencement No. 2 (SI 2026/622), made June 10, 2026, commenced the SIA's section 12 guidance duties and its section 18(5) to (7) qualifying-worldwide-revenue statement duty on June 15, 2026. The substantive duties and enforcement powers still await commencement regulations.
The Government set a minimum 24-month implementation period running from April 3, 2025. Government materials on gov.uk state the Act is expected to come into force in spring 2027. Until then, preparation is prudent but compliance is not yet legally required.
The Home Office published statutory guidance under section 27 on April 15, 2026. The Security Industry Authority consulted on its draft section 12 statutory guidance, with the consultation closing June 12, 2026. The Terrorism (Protection of Premises) (Notification Requirements) Regulations 2026 (SI 2026/793) were laid before both Houses on July 14, 2026, with supplementary gov.uk guidance published the same day. Organizations preparing now should work from these official materials, not from summaries.
The Act covers qualifying premises, buildings used mainly for specified public activities listed in the Act's Schedule 1, and qualifying events, public events with controlled access such as ticket checks. Two tiers turn on expected capacity including staff: the Standard Tier covers 200 to 799 persons, and the Enhanced Tier covers 800 or more. Qualifying events have no standard tier; an event qualifies only at 800 or more. Places of worship are automatically in the Standard Tier regardless of capacity. Open-access parks and some transport premises are excluded.
Those responsible must notify the regulator, the Security Industry Authority, and maintain public protection procedures covering evacuation, invacuation, lockdown, and communication. Enhanced Tier premises and qualifying events face additional obligations: physical and operational measures addressing monitoring of the premises or event and the immediate vicinity, control of the movement of individuals into, out of and within the premises, physical safety and security of the premises, and security of information; documented security assessments; and designation of a senior individual with overarching responsibility. The designation does not relieve the responsible person of the duties, which remain imposed on it (the Act does not use non-delegability language; this is our interpretation).
Sections 13, 14 and 17 give the SIA enforcement powers, comprising compliance notices, restriction notices (for enhanced duty premises and qualifying events only), and penalty notices; section 18 sets the maximum penalty amounts. Maximum non-compliance penalties are £10,000 for standard duty premises; for enhanced duty premises or qualifying events, the greater of £18 million or 5 percent of qualifying worldwide revenue; and £5,000 for failing to attend and answer questions. Section 19 caps daily penalties at £500 per day for standard duty premises and £50,000 per day for enhanced duty premises or qualifying events, where a penalty notice follows non-compliance with a compliance notice or restriction notice. Criminal offences under section 24 cover non-compliance with compliance notices for enhanced duty premises or qualifying events and with restriction notices (with a defence of having taken all reasonable steps); non-compliance with a standard-tier compliance notice is not a criminal offence.
With commencement expected in spring 2027, affected organizations have a defined preparation window: identify whether premises or events qualify, assign responsibility, review the published Home Office guidance, and track the remaining commencement regulations. Insurance cannot substitute for compliance, and compliance planning cannot substitute for insurance; the two belong in the same conversation, with qualified counsel and brokers at the table.
Published September 28, 2026. This article is for informational purposes only and is not legal advice. Statutory duties, commencement dates, and compliance requirements should be confirmed through official UK guidance and qualified counsel.
Share the organization, relevant locations, operations or assets at risk, and the target coverage date. Do not include confidential security plans, medical information or payment details in the initial email.