Skip to main content
Powerful IT Systems
Buy hardware
Free Tool · Runs in Your Browser

Cyber Insurance Readiness Checklist

Cyber insurance applications have gotten a lot more specific. Before your broker sends the renewal form, answer these 15 questions about the controls carriers commonly ask about. You get a gap report with why each gap matters and how to fix it, ready to print or save as a PDF.

Private by design: your answers never leave your browser and are not saved anywhere.

Not insurance or legal advice. Every carrier's questions and requirements are different; answer your actual application carefully and ask your broker about coverage.

The Checklist

0 of 15 answered

  1. 01Is multi-factor authentication (MFA) turned on for every email account, including the owner's, shared mailboxes that allow sign-in, and former employees' accounts that are still active?
  2. 02Does every way into your network from outside (VPN, Remote Desktop, remote-control tools, cloud portals) require MFA?
  3. 03Do administrator accounts (domain admin, Microsoft 365 global admin, firewall, backup console) require MFA?
  4. 04Is endpoint detection and response (EDR), not just traditional antivirus, installed on every computer and server and monitored by someone?
  5. 05Do you keep at least one backup copy that is offline, immutable, or otherwise cannot be changed or deleted using your normal network credentials?
  6. 06Have you actually restored data or a whole system from backup in the last six months to prove it works?
  7. 07Are critical security updates for computers, servers, firewalls, and key software applied within about 30 days, and faster for actively exploited flaws?
  8. 08Are all of your computers and servers running operating systems and software that still get security updates (for example, no Windows 10 PCs without extended updates, or Windows Server 2012)?
  9. 09Do you use advanced email filtering that scans links and attachments, and is your domain protected with SPF, DKIM, and DMARC?
  10. 10Do employees get security awareness training and simulated phishing tests at least once a year?
  11. 11Do staff use regular (non-admin) accounts for daily work, with admin rights limited to separate accounts that are reviewed regularly?
  12. 12Do you have a written incident response plan that says who to call first (including your carrier's breach hotline), who decides, and how you keep working?
  13. 13Is remote access for outside vendors (software vendors, equipment makers, your IT provider) controlled, protected with MFA, and turned on only when needed?
  14. 14Are all laptops and any devices that store business or customer data encrypted (BitLocker on Windows, FileVault on Mac)?
  15. 15Do you verify every new or changed payment or bank-account request by calling a known phone number before money moves?

Answer all 15 questions to see your report. "Not sure" is a fine answer.

Want Help With the Gaps?

We help businesses across Milwaukee and Southeast Wisconsin close exactly these gaps before renewal: MFA, EDR, backups that survive ransomware, patching, and incident response plans. Read our guide to what Milwaukee businesses should fix before a cyber insurance renewal, see our cybersecurity services, or start with a cybersecurity assessment. If you have compliance obligations too, our IT compliance services cover HIPAA and PCI-DSS support, and we have specific pages for dental and medical practices and defense manufacturers working toward CMMC.

GET ESTIMATECONTACT US(262) 912-6404

Frequently Asked Questions

Close Your Gaps Before Renewal

Send us your gap report or give us a call. We'll tell you what to fix first and what it takes, with no contracts.

Contact Us TodayVIEW PLANS & PRICING(262) 912-6404