Consulting Insurance and Indemnity: What E&O and D&O Carriers Now Underwrite After the 2024-2025 Advice-Liability Cases

The public advice-liability cases that ran through 2024 and 2025, in which consulting firms found themselves named as defendants in matters arising from work delivered to clients that were later regulated, sanctioned, or subject to material government action, changed the underwriting posture of the errors-and-omissions and directors-and-officers carriers that serve the professional-services market. That change is not fully visible in the industry commentary, but it is showing up in the specific policy language that consulting firms are being asked to accept at renewal, and it is starting to change what a scope-of-work document is actually allowed to say.

The first change is in the coverage triggers. Historically, an E&O policy for a consulting firm responded to a claim of professional negligence by the client. The new policy language, which several of the major carriers have moved toward, expands the trigger to include regulatory or governmental action against the client where the underlying subject matter is materially connected to advice the firm delivered. That is a meaningfully broader trigger, and it means that a firm advising a client whose sector later comes under enforcement action can be pulled into the resulting matter in a way the historical coverage anticipated less clearly. The premium ask at renewal reflects this, and the specific carriers that have been most aggressive on this expansion have gained share in the professional-services book precisely because their coverage form now more clearly addresses the emerging exposure.

The second change is in the exclusions. Advice given on matters that touch specific regulated activities, particularly certain kinds of financial-services strategy work, certain kinds of healthcare-payment work, and certain kinds of federal-contracting advisory, is now subject to explicit exclusions or heightened attestation requirements on the coverage form. Firms with meaningful practices in those areas are being asked, at renewal, to attest to specific quality controls, specific partner-review procedures, and specific conflict-check protocols, and the attestations are becoming material terms of the policy rather than informational disclosures. A breach of the attested control, in an incident, can be argued as a coverage defense in the same way that a breached MFA attestation can be argued against a cyber claim.

The third change is in the D&O market for the consulting firm's own leadership. The exposure of firm partners and managing directors to claims arising from advice delivered to clients has been mapped more explicitly, and the coverage available for named individuals has tightened around specific scenarios involving alleged conflicts, alleged failure to disclose, and alleged failure to supervise. The specific insurance towers that consulting firm boards used to construct on a light-touch basis are now the subject of the same detailed review that the underlying professional lines get. This has raised the cost, and it has raised the standard of governance the underwriter expects to see inside the firm.

The scope-of-work implication is the most operationally consequential change. The firms that have adapted well have rewritten their standard engagement letter and their standard scope-of-work language to be more precise about three things: the specific questions the engagement is answering, the specific limitations on the advice being given, and the specific decisions that remain with the client. Vague scope language that used to be tolerated because the coverage would respond broadly is now a specific liability exposure, and the general counsel of the firm is materially more involved in the scoping conversation than they were three years ago. Clients that used to sign engagement letters without close reading are, in 2026, likely to see more specific carve-outs than they are used to seeing, and the reason is the coverage form the firm is operating under.

The last change is in how firms are staffing their own risk function. The specific role of an internal general counsel with dedicated professional-liability expertise, which used to be a specialist role at the very largest firms, has become the norm at any firm doing significant advisory work with regulated clients. That role is doing three things: reviewing scope language on new engagements, maintaining the attestation posture the coverage requires, and coordinating with the carrier when an incident begins to develop, before the incident becomes a claim.

For a managing partner or a firm CFO in 2026, the working guidance is that the professional-liability posture is now a first-order operating question, not an insurance-renewal question. The specific coverage form the firm operates under should be reviewed by someone with actual claims experience, not accepted as a commodity purchase. The specific attestations that go on the renewal application should be verifiable, and there should be a process for updating them when the firm's controls change. And the scope-of-work language should be reviewed by counsel with the coverage form in mind, because a scope written for an older coverage form is exposing the firm in ways the historical policy would have absorbed but the current policy explicitly will not.