Cyber Insurance Readiness Checklist

Accounts and sign-in

Multi-factor sign-in is on for every email account.Why insurers ask: Stolen email passwords are behind most business email fraud. Applications almost always ask about this.How we help: We turn on and enforce multi-factor sign-in across Microsoft 365, including shared and admin accounts.
Multi-factor sign-in is on for remote access (VPN, remote desktop, remote tools).Why insurers ask: Remote access is a common way in for ransomware groups.How we help: We put remote access behind multi-factor sign-in, or replace it with something safer.
Staff don’t use admin accounts for everyday work.Why insurers ask: Malware runs with whatever rights the logged-in user has.How we help: We remove local admin rights from daily accounts and keep separate admin accounts.
Remote desktop is not open to the internet.Why insurers ask: Open remote desktop ports are scanned for and attacked constantly.How we help: We check the firewall for open remote desktop and close it off behind a VPN.

Devices

Every PC and server has endpoint detection and response (EDR), not just basic antivirus.Why insurers ask: Many applications now ask by name whether you run EDR and who watches its alerts.How we help: SentinelOne on every enrolled device. On Managed + Security, a security operations centre monitors it 24/7.
Windows and software updates are installed on a schedule, and someone checks they worked.Why insurers ask: Unpatched software is one of the most common ways attackers get in.How we help: Monitoring and patching on every PC is part of every managed plan, with a monthly report.
No computers run an out-of-support system such as Windows 10.Why insurers ask: Windows 10 support ended in October 2025, so those PCs no longer get security fixes.How we help: We list every machine and its support status, and plan the upgrades or replacements.
Laptops that leave the office are encrypted.Why insurers ask: A lost laptop with encryption is an inconvenience. Without it, it can be a reportable breach.How we help: We turn on and check BitLocker encryption on business laptops.

Backups

Backups include a copy that ransomware can’t reach (offline, immutable or separate sign-in).Why insurers ask: Ransomware looks for backups first. A backup on the same network can be encrypted too.How we help: Server backup with Axcient x360Recover and Microsoft 365 backup with x360Cloud on Managed plans.
Someone has restored from the backup in the last year to prove it works.Why insurers ask: Applications ask whether backups are tested, not just whether they exist.How we help: We run and document test restores so you have proof on file.

Email and people

Email is filtered for phishing and dangerous attachments, and your domain has SPF, DKIM and DMARC set up.Why insurers ask: Phishing is still the most common starting point for an attack.How we help: We configure Microsoft 365 email protection and your domain’s email authentication records.
Staff get security awareness training and phishing tests at least once a year.Why insurers ask: Insurers ask about training because people are the target of most attacks.How we help: Proofpoint training and phishing tests are included on Managed + Security.
Changes to payment or banking details are confirmed by phone before money moves.Why insurers ask: Fake invoice and payment change scams are a common claim, and applications often ask about this procedure.How we help: We help you write the procedure and train staff on it.

Plans and records

You have an up-to-date list of your computers, servers and accounts.Why insurers ask: You can’t protect, or answer questions about, what you don’t know you have.How we help: Asset and licence tracking is part of every managed plan.
You have a written plan for what to do if you are hacked.Why insurers ask: Applications ask whether an incident response plan exists and who is on it.How we help: We write a short, practical incident plan with you: who to call, what to switch off, how to restore.

A general guide, not insurance or legal advice. Every insurer's application is different, and only your insurer decides what it covers. Ask your broker about your policy, and answer every application question truthfully.

Common questions

Before you fill in the application.

Why is my cyber insurance application asking so many technical questions?

Insurers have paid out heavily on ransomware and email fraud claims, so most now ask about specific security controls before they quote or renew. Multi-factor sign-in, endpoint detection and response (EDR), tested backups and staff training come up on most applications.

What happens if I answer “no” to some questions?

It depends on the insurer and the control. A “no” can mean a higher premium, a lower limit, an exclusion, or a request to fix it before the policy is bound. Answering “yes” to something that isn’t actually in place is worse: it can put a claim at risk. Fix the gaps before renewal, then answer honestly.

Can you fill out the insurance application for us?

We can go through the security questions with you, explain what each one means, and tell you truthfully what is and isn’t in place. The application is yours to sign, and your broker is the right person for coverage questions.

How long does it take to close the gaps?

It depends on how many there are and how many computers you have. Multi-factor sign-in and email settings are often quick; replacing out-of-support PCs takes longer. Start a few weeks before your renewal date if you can.

Common questions

Before you fill in the application.

Why is my cyber insurance application asking so many technical questions?

What happens if I answer “no” to some questions?

Can you fill out the insurance application for us?

How long does it take to close the gaps?

Will you pass your cyber insurance renewal? Find out in five minutes.

Before you fill in the application.

Let's make your technology work harder for your business.

Will you pass your cyber insurance renewal? Find out in five minutes.

Before you fill in the application.

Let's make your technology work harder for your business.