Cyber insurance applications have changed. A few years ago a policy took a signature. Today the form asks whether every mailbox has multi-factor authentication, whether a security team watches your computers around the clock, when you last tested a backup restore, and when your staff last had phishing training. Answer no to the wrong ones and the premium climbs, exclusions appear, or the application is declined. Answer yes when the honest answer is no, and a claim can be denied.
This check walks through the fourteen controls that come up on nearly every form, in plain words. Each one you are missing is listed with what it would take to fix, and where the fix is one of our managed security layers, the monthly cost at our published rates, using the equipment and headcount you enter.
It is a readiness exercise, not underwriting advice. Your broker has the exact form, and we are happy to sit down and fill it in with you.
Click “Send this with the form below” in the check, add your name and email, and we reply with a short plan to close the gaps before your renewal.
Nearly every carrier now requires MFA on email, on remote access such as VPN and remote desktop, and on administrator accounts. It is the first question on most forms and the most common reason an application is declined.
Most forms ask for endpoint detection and response on every computer and server, and many now ask whether it is monitored around the clock. Traditional antivirus alone no longer satisfies the question. Huntress managed detection and response is the layer we use.
Depending on the carrier: a higher premium, a lower limit for ransomware, an exclusion for the missing control, or a declined application. The check above shows which answers matter most and what it costs to turn them into a yes.
