The ten controls your cyber insurer will ask about

Cyber insurance renewals have changed. Five years ago the application was a page. Now it is a technical questionnaire, and the answers are treated as warranties, which means a wrong answer can cost you a claim.

What they ask, and why

Underwriters are not trying to catch you out. They are pricing the likelihood that you will be the one filing a claim, and a handful of controls turn out to predict that well.

Multi-factor authentication

The single biggest question. They want MFA on email, on remote access, and on administrative accounts. Partial coverage is common and is where honest answers get difficult.

Backups you have actually restored

Having backups is not the question. Having tested a restore in the last quarter is.

Endpoint detection and response

Traditional antivirus is no longer sufficient for most carriers.

Answering honestly

If you cannot answer yes, say so. An accurate no is cheaper than an inaccurate yes discovered during a claim investigation.

Work through the checklist on our homepage, mark each item honestly, then fix the gaps before you submit. That is exactly what our security review produces.