cyber-loesegeld-sanktionsrecht

What it does

Provides a workflow for evaluating a cyber insurance claim involving ransomware with sanctions risk and money laundering concerns. It directs the agent to clarify actors, deadlines, and outputs; mark deadlines and urgent risks; verify key legal authorities; determine the responsible entity and recipients; gather evidence; and produce a cyber-loss protocol with sanctions screening, coverage analysis, and a suggested course on whether to pay a ransom. It focuses on the interaction between sanctions law, insurance law, and criminal law.

How it works

The skill instructs the agent to:

• Clarify who acts, what decision is pending, which deadline is running, and the required output.
• Identify deadlines and urgent risks first; separate various timeframes (e.g., Widerspruch, Klage, Einspruch, Rechtsmittel, Verjährung) by topic.
• Verify core statutes across listed sources by live checks (gesetzte-im-internet.de, dejure.org, openJur, etc.), and avoid model-based knowledge.
• Determine the proper recipient and addressees (mandant, opponent, authorities, experts, etc.).
• Collect documents and evidence (administrative acts, contracts, pleadings, notices, protocols, expert reports) and check for gaps via file access or client query; use live checks for current normative changes.
• Apply a focus on cyber insurance under ransomware with sanctions risk; assess whether ransom payments are covered and whether sanctions violations apply; include a screening and risk matrix; deliver a cyber-damage protocol with sanctions screening, coverage analysis, and a recommendation for or against ransom payment; distinguish from related specialties.

When to use it

Include when dealing with a ransomware incident where sanctions risk and money-laundering concerns might affect insurance coverage and decisions about ransom payments. It prescribes a structured evaluation and a documented output (Cyber-Schadenprotokoll) including a sanctions check and coverage analysis.

What it can touch

The skill references tools and sources for verification (live norms, screening tools) and prescribes using Chainalysis/Elliptic style screenings and OFAC/EU sanction lists, along with standard legal references. It specifies output artifacts such as a Cyber-Schadenprotokoll with a sanctions check and coverage analysis; it also mentions a compliance memo and engagement with insurers. It does not list executable code or files beyond the described outputs.

Caveats

The skill enumerates specific legal references (e.g., VO (EU) 833/2014, 269/2014; OFAC SDN List; § 261 StGB; § 28 VVG; § 81 VVG; § 8b BSIG), and requires live-checks for up-to-date law; it assumes access to live legal databases and screening results; it does not guarantee outcomes and emphasizes documenting steps and decisions. It also notes that the output may vary depending on mandant circumstances and that the template may be adapted.