01 Three things in one package: general liability, commercial property, and business interruption coverage, what regulators describe as the standard small-business bundle. What a BOP does not include is where owners get burned: workers' compensation, commercial auto, and professional liability are always separate policies, and BOP eligibility is limited to lower-risk businesses.
02 It depends, but for most businesses the practical answer is yes. No law requires cyber insurance, yet three facts do the deciding: every U.S. state obligates you to notify individuals after a breach of their personal information, standard property and liability policies don't cover cyber events, and client contracts increasingly require the coverage. If you hold personal data, move money electronically, or sign those contracts, you need it.
03 It depends on three numbers: the loss against your deductible, the premium impact at renewal, and the three-to-five-year claims history (your loss runs) that every future insurer will read. Self-paying small first-party losses is often rational, but report anything involving an injury or a third party promptly, even if you expect to absorb the cost.