Cyber Insurance Requirements Checklist
Cyber Insurance Requirements Checklist
CYBER INSURANCE REQUIREMENTS CHECKLIST
Cyber insurance applications have become detailed security questionnaires. A wrong answer can mean a higher premium, a denied renewal or a disputed claim. This checklist covers the controls carriers commonly ask about. Every carrier words them differently, so always read your own application.
- The controls carriers ask about most
- What each one means in plain English
- Help answering your application accurately
WHY THE APPLICATION MATTERS
CLAIMS DISPUTES
If you said yes to MFA everywhere and an attacker got in through an account without it, expect hard questions.
RENEWAL SURPRISES
Carriers add new questions each year, often about EDR, backups or admin rights.
VAGUE ANSWERS
Nobody at the office is sure what the questions mean, so they guess.
VENDOR GAPS
Your IT provider set things up, but nobody wrote down what is in place.
CONTROLS CARRIERS COMMONLY ASK ABOUT
MFA
On email, remote access, admin accounts and cloud apps. Often the first question.
EDR AND MONITORING
Endpoint detection and response on all devices, often with 24/7 monitoring.
BACKUPS
Regular, tested, and separated or immutable so ransomware cannot reach them.
EMAIL AND TRAINING
Email filtering, DMARC, phishing training and a payment verification process.
Other common questions cover patching timelines, end-of-life systems, admin rights, incident response plans and how vendors connect to your network.
A QUICK SELF-CHECK
Can you answer yes to each of these today? If not, talk to us before your renewal date.
- MFA on every email account and remote access
- EDR on every computer and server
- Backups tested in the last quarter
- Staff phishing training in the last year
- No admin rights for daily user accounts
- A written incident response plan
MORE THINGS CARRIERS LOOK AT
PATCHING
How fast critical updates are applied.
END OF LIFE
Old systems that no longer get updates.
PRIVILEGED ACCESS
Who has admin rights and how they are protected.
VENDOR ACCESS
How outside vendors connect to your systems.
HOW WE HELP WITH YOUR APPLICATION
01
READ
Go through your actual application with you.
02
CHECK
Compare each question to what is really in place.
03
FIX
Close gaps before you sign, where possible.
04
RECORD
Give you reports that back up your answers.
QUICK ANSWERS
No. We are not an insurance agency. We help you put the security controls in place and answer the technical questions accurately.
No. Questions vary by carrier and policy. Use this as a starting point and read your own application closely.
Tell your broker the truth and ask what is required. We can often close gaps quickly, especially MFA and EDR.
Yes. We can provide coverage reports for MFA, EDR, backups and training.
GET READY FOR YOUR RENEWAL
Send us your application or renewal questions. We will go through them with you.
Or call 717-516-0600