In 2025 a proposed cyber-insurance line carried a ₹120 crore first-year gross written premium ambition. Its service plan assumed one incident coordinator. We examined three concurrent fictional scenarios and identified four distinct response roles that could not credibly be treated as one person's interchangeable tasks. The proposal had described the commercial opportunity more fully than the organisation needed to respond when obligations arrived together.
I held the proposal and sanctioned ₹1.6 crore for readiness design. The work had to distinguish coordination, technical incident response, legal advice and customer communication, including the professional responsibility retained by authorised providers. One coordinator might connect those activities, but the title could not supply every competence or create simultaneous capacity. The exercise did not use an actual attack, expose customer records or claim that the organisation had already delivered the proposed response.
The tradeoff was to postpone a visible commercial opportunity while investing in the conditions on which it depended. The ₹120 crore figure remained an ambition, not booked premium, revenue or a forecast validated by the exercise. The ₹1.6 crore was a funded programme, not the full cost of an operating service or evidence that the gap had closed. Product, underwriting, risk, actuarial, legal and operating owners retained the further work necessary before any actual market decision.
I regard the outcome as a more demanding proposal rather than a successful launch. The board could now examine a service organisation alongside the opportunity, including what concurrent demand might require and which capabilities were still unproven. The case does not imply that a small provider is always unsuitable or that four roles necessarily mean four permanent employees. It asks whether the work and professional boundaries have been understood before a headcount or job title is used to make a complex promise look ready.