Cyber Insurance Readiness Audit

What you get — 48-hour deep audit, automated

A premium control-by-control insurability audit for organisations seeking £1M+ cyber cover or renewing on tightened market terms. Produced by SummitBridge Horizon's automated AI compliance pipeline (ARGOS research → SAGE control assessment → MUSE drafting), benchmarked against current cyber-insurance underwriter expectations and published claims-denial trends. Delivered to your portal in 48 hours.

• 10-control insurability assessment: MFA deployment completeness, EDR/XDR coverage, backup + ransomware-resilience, email security, patch cadence, privileged access, incident-response preparedness, security training, network segmentation, vulnerability management — each rated INSURABLE / AT RISK / UNINSURABLE with specific gaps.
• Premium-impact estimate: Per control, the likely premium impact range (e.g. "Adding offline backups → 8–15% premium reduction") so you can prioritise remediation by financial return.
• Coverage exclusion analysis: Which standard cyber-policy exclusions (war, NotPetya-style nation-state, social-engineering, prior-known-vulnerabilities) affect your specific risk profile and which controls close them.
• Insurer questionnaire pre-fill: Pre-populated answers for the most common UK underwriter questionnaires — broker just hands the document over, no back-and-forth.
• Recommended coverage structure: Sub-limit recommendations (ransomware, business interruption, regulatory defence, third-party liability) calibrated to your operating profile.
• Claims-defence evidence pack: Documentation of each control's implementation — material to attach to a claim if you ever need to defend control state at the time of incident.
• Remediation priority matrix: Ranked action plan separating "needed before next renewal" from "long-term posture improvement", with effort + cost ranges.
• Industry-benchmarked context: Where your posture sits versus the standard underwriter expectation for your sector and size.

Who this is for

Organisations seeking £1M+ cyber cover, renewing in a hardening market, or recovering from a recent claim with degraded terms. Also useful for boards needing independent benchmarking of their cyber posture against insurer expectations. Smaller policies (<£1M cover) may be better served by the £299 Cyber Insurance Readiness self-serve gap analysis.

Delivery model

Fully digital, 48-hour turnaround. After purchase you complete a 10-question intake (current insurance status, MFA scope, EDR coverage, backup strategy, IR plan maturity, privileged access management, employee count, revenue range). The AI pipeline runs underwriter-perspective control assessment + premium-impact modelling, delivers everything to your portal — broker-ready PDFs, pre-fill data, remediation matrix.

DORA Coverage (Audit Lens)

The audit version of the readiness pack provides evidence-quality scoring across all four DORA dimensions:

• DORA Article 5-7 — ICT risk management framework — Audit-grade ICT risk management framework scoring; risk assessment methodology review; ICT risk register completeness check; risk-treatment evidence pack
• DORA Article 17-19 — Incident reporting (FCA cadence) — Incident reporting capability audit: can the organisation produce an FCA-aligned major-incident report within the regulatory reporting window? Notification workflow audit + reporting template freshness check
• DORA Article 24-27 — Operational resilience testing — Operational resilience testing evidence audit: TLPT scope (for in-scope entities), threat-intelligence-led penetration test programme review, resilience-test report quality check, continuity testing cadence verification
• DORA Article 28 — Third-party ICT risk + register — Third-party register audit + supplier risk classification review (already in baseline coverage)