Cyber insurance readiness guide

Cyber insurance readiness guide

Print this guide 12 min · Printable

Applying for or renewing cyber insurance now involves a detailed look at your security. Being prepared makes the process faster, helps you answer accurately, and shows you where improving could help your options. Use this guide a few months before renewal.

What insurers usually look for

• Multi-factor authentication on email, remote access, and administrator accounts.
• Backups that are separate from your network and have been tested.
• Endpoint protection on all computers and servers.
• Patching on a schedule, especially for critical updates.
• Email security and employee training.
• An incident response plan with named people.
• Access controls, including removing accounts when staff leave.

Step 1: Gather the evidence once

Create a folder, share it with the people who need it, and keep it current. Include the items below.

• Inventory of systems and applications
• Proof that multi-factor authentication is enforced
• Backup reports and the date and result of your last restore test
• Endpoint protection coverage report
• Patch and update records
• Security awareness training completion records
• Written policies, such as acceptable use, access control, and AI use
• Your incident response plan
• A list of administrator accounts and the date of the last access review

Step 2: Answer accurately

Answer each question as it is true today. If a control is in place for most but not all users, say so. An application that overstates your controls can cause trouble if you ever make a claim.

Step 3: Fix what you can before renewal

If you cannot answer yes to a question, treat it as a to-do. Many of the most important controls, such as multi-factor authentication, tested backups, and training, can be put in place in a few weeks.

Step 4: Ask your provider to review it

Have your IT or security provider read the application with you before you submit it. They can confirm what is true and find evidence quickly.

Step 5: Keep it year-round

Add a reminder each quarter to update the evidence folder. When renewal comes around, you will already be ready.