Cyber Insurance Readiness Assessment

Know What Underwriters Check — Before They Decline You

Most businesses apply for cyber insurance without understanding what the underwriting process actually assesses. The result: higher premiums, narrower coverage, or policy voidance when a claim is made. This assessment replicates the insurer's perspective — scoring your posture on the 12 factors that most directly influence cyber insurance decisions and pricing.

• MFA Coverage Assessment: The single most important factor in underwriting decisions — where you have it, where you do not, and whether it is properly enforced on privileged accounts
• Backup Verification: Not just "do you have backups" — are they tested, air-gapped or offline, and restorable within your documented RTO?
• Privileged Access Control: Admin credential management — the primary target in ransomware attacks and a critical underwriter concern
• EDR/XDR Coverage: Endpoint Detection and Response — increasingly required by insurers as a condition of coverage, not just recommended
• Email Gateway Controls: Anti-phishing measures — assessed as a direct proxy for BEC and ransomware risk in insurer models
• Patch Management Score: How quickly you apply critical updates — directly correlated with breach probability in actuarial models
• Incident Response Plan: Documented and tested IR plan — underwriters increasingly require evidence of testing, not just existence
• Broker-Ready Security Summary: One-page posture document — hand directly to your broker or underwriter to support your application
• Coverage Gap Map: Which standard policy exclusions most affect your specific risk profile — and what controls close them

⚠️ Legal disclaimer (COMPLIANCE): This product is provided for information and compliance documentation only; it is not regulatory advice. Read the full disclaimer below or in our Terms of Service before purchase.

DORA Coverage (Cyber-Insurance Adjacency)

Cyber insurance underwriters increasingly require DORA-aligned evidence from prospective insureds in the EU/UK financial-services supply chain. This readiness pack maps the four DORA audit dimensions:

• DORA Article 5-7 — ICT risk management framework — Risk assessment template aligned with DORA Article 5-7 ICT risk management requirements; risk register linking insurance-relevant risk categories to DORA-defined ICT risk taxonomy
• DORA Article 17-19 — Incident reporting (FCA cadence) — Incident reporting workflow with FCA notification cadence templates; mapping major-incident classification thresholds to insurance notification requirements; reporting window readiness assessment
• DORA Article 24-27 — Operational resilience testing — Resilience testing programme template (TLPT for in-scope entities, vulnerability assessment for all); continuity testing evidence pack for insurer due diligence
• DORA Article 28 — Third-party ICT risk + register — Third-party risk register template, ICT supplier risk classification framework, vendor risk assessment workflow aligned with DORA Article 28