SOC 2 Type II audited 24/7 help desk Microsoft Solutions Partner Business IT support since 2010 Nationwide service, offices in NJ, PA, DE and NY
Why Insurers Ask About Your Security
Cyber insurance helps a business recover from incidents such as ransomware, email fraud and data breaches. Before offering a policy or a renewal, insurers ask detailed questions about the security controls a business has in place, and the answers can affect whether coverage is offered and on what terms.
Questionnaires differ between insurers, but many ask about the same core controls. Use this checklist to see where you stand before your next application or renewal. It is general guidance, not legal or insurance advice; your insurer or broker decides what your policy requires. For the wider basics, see our small business cybersecurity checklist.
Multi-Factor Authentication
- MFA on email and Microsoft 365 for every user.
- MFA on remote access, such as VPN and remote desktop tools.
- MFA on administrator and other privileged accounts.
- MFA on cloud applications and backup systems that hold business data.
Endpoint Protection and Monitoring
- Endpoint protection on every workstation and server, including detection and response capabilities, often called EDR.
- Alerts reviewed by people who can act on them, including outside business hours.
- Administrator rights removed from everyday user accounts.
- A current inventory of the devices on your network.
Backups and Recovery
- Regular backups of servers, key applications and Microsoft 365 data.
- At least one backup copy kept offline, immutable or otherwise separated from your main network, so ransomware cannot reach it.
- Backups protected with separate credentials and multi-factor authentication.
- Restores tested on a schedule, with the results recorded.
Patching and Supported Systems
- Security updates installed on a set schedule, with critical updates applied promptly.
- No operating systems or software past the vendor’s end of support, or a dated plan to replace them.
- Firewalls, routers and other network equipment kept up to date. See network security services.
Email Security and Employee Training
- Email filtering for phishing, malware and spoofed senders.
- SPF, DKIM and DMARC records published for your domain.
- Security awareness training and phishing exercises for employees.
- A verification step, such as a phone call to a known number, before changing payment details or sending a wire transfer.
Incident Response and Documentation
- A written incident response plan with contacts for your IT provider, insurer and legal counsel. See our business continuity plan checklist.
- Sign-in and audit logs kept long enough to investigate an incident.
- Documented policies for access, passwords and device use.
- A current list of who has administrator access.
Answer the Questionnaire Accurately
Answer each question based on what is actually in place, not what is planned. If a control is missing, fix it before the application or describe a plan with a date, rather than giving an answer that is not accurate.
Keep the questionnaire, your answers and the supporting documentation together. They help at renewal time and if questions come up during a claim.
How TechStarters Helps
Several of these controls are part of our managed IT services: endpoint protection and security patching on every managed workstation and server, and 24/7 monitoring. Our cybersecurity services add multi-factor authentication, conditional access, identity protection and Microsoft 365 security, and backup and disaster recovery covers backups, recovery planning and testing.
We also help you answer the security questions insurers ask and plan any improvements before your application or renewal through IT consulting and virtual CIO services. TechStarters is a SOC 2 Type II audited managed service provider. To check your Microsoft 365 settings, use our Microsoft 365 security checklist.
Cyber Insurance Requirements FAQs
Is multi-factor authentication required for cyber insurance?
Many insurers ask about multi-factor authentication for email, remote access and administrator accounts, and missing it can affect coverage. Check your own application or policy for the exact requirements.
What is EDR?
Endpoint detection and response (EDR) goes beyond traditional antivirus by watching devices for suspicious activity and helping stop and investigate it. Many cyber insurance questionnaires ask whether you use it.
Do backups need to be offline for cyber insurance?
Insurers often ask whether at least one backup copy is separated from your main network, so ransomware cannot encrypt or delete it. That can mean offline, immutable or otherwise isolated backups.
Can you help us complete a cyber insurance questionnaire?
Yes. We help you answer the security questions, such as how you use multi-factor authentication, backups and endpoint protection, and plan any improvements needed before you apply or renew. Request a quote to get started.
Does cyber insurance replace cybersecurity?
No. Insurance helps with the financial impact of an incident. Security controls reduce the chance of an incident and limit the damage when one happens, and insurers expect both.
Explore Our Managed IT Services
Request a Managed IT Services Quote
Tell us about your business, your locations and your devices, and we will send a written proposal with per-device monthly pricing. Prefer to talk? Call (877) 932-0040.