Cyber insurance requirements: what insurers ask and how to be ready
Applications and renewals ask detailed questions about your security. Use this plain English guide and free checklist to find gaps before your insurer does.
Eight areas that come up again and again
Requirements differ by insurer, policy and company size. Your own application is always the source of truth.
Multi-factor authentication
Insurers commonly ask whether MFA protects email, remote access, administrator accounts and cloud consoles.
Endpoint protection
Many applications ask about EDR or similar protection on every computer and server.
Backups and restore testing
Expect questions about offline or immutable copies, separate credentials and when a restore was last tested.
Email security and training
Filtering, phishing awareness training and payment verification steps often come up.
Patching
How quickly critical security updates are applied, and whether unsupported systems remain.
Privileged access
Who has administrator rights, whether admin accounts are separate, and how access is removed.
Network and remote access
Firewall support, exposed remote desktop and how staff connect remotely.
Incident response plan
Whether a written plan exists, who is on it, and how and when the insurer is notified.
Better answers can mean better terms
- Missing controls can mean higher premiums, lower limits or added conditions
- Inaccurate answers can create problems if you ever need to make a claim
- Fixing gaps before the renewal date gives you time to do it calmly
- Evidence ready in advance makes the application faster
Coverage decisions are made by your insurer. Talk to your broker and attorney about your policy.
How to answer the application
A simple process that keeps the answers accurate.
Read the whole form
Look at every question and who in your company can answer each one.
Check what is true today
Use the checklist. Do not answer from memory or from what is planned.
Fix or disclose gaps
Close the quick ones. Be accurate about the rest.
Keep evidence
Save screenshots, reports and dates that back up each answer.
Review each renewal
Controls drift. Check again before every renewal.
The Cyber Insurance Readiness Checklist
Two pages, 30 checks across six areas, with a score guide.
- Accounts and access
- Computers and servers
- Email and people
- Backup and recovery
- Network and cloud
- Planning and evidence
From questionnaire to fixed
Review the questionnaire
We go through the application with you and check each control against your environment.
Close the gaps
MFA, endpoint protection, backups, email security and patching, deployed and documented.
Compliance support
See how we support customer security reviews and regulated work.
Learn moreAll CTEKS resources
Knowledge Base
Guides on IT, security and cloud
Learn moreBlog
Latest articles
Learn moreCustomer Stories
How we help clients
Learn moreVideos
Short explainers on IT and security
Learn moreManaged IT vs Break-Fix
Compare the two approaches
Learn moreManaged IT vs In-House
Compare with hiring your own team
Learn moreSecurity Checklist
Free 25 point PDF
Learn moreIT Cost Calculator
See a starting monthly estimate
Learn moreDowntime Cost Calculator
What an outage costs you
Learn moreSecurity Self-Check
Score your security in 2 minutes
Learn moreSwitching IT Providers
A six step switch plan
Learn moreCompliance Support
CMMC, FTC Safeguards, NYDFS
Learn moreIT Partner Checklist
Free download
Learn moreGet Support
Phone, ticket and remote help
Learn moreCommon questions
Does CTEKS sell cyber insurance?
No. CTEKS is an IT and cybersecurity company. We help you meet the technical controls insurers ask about. Talk to a licensed broker about coverage.
Will this checklist guarantee coverage or lower premiums?
No. Insurers set their own requirements and make their own decisions. The checklist helps you find and fix common gaps and prepare accurate answers.
Can CTEKS fill out my insurance application?
We can help answer the technical questions accurately and gather evidence. You and your broker remain responsible for the application.
How often should I review this?
Before each renewal, and after any major change such as a new office, a migration or a security incident.
Get the checklist
Enter your details and we will unlock the PDF.
- Free, no obligation
- Instant access after the form
- Plain English, no jargon
Prefer to talk? (847) 200-3666
