Cyber Insurance Renewal Questionnaire Help for Small Businesses
The renewal form came in and it is longer than last year. Some of the questions you cannot answer with a straight yes. That is a good time to stop and check, because your answers can become conditions of the policy.
I go through the form with you, remotely, question by question. You get each answer marked ready, fixable or not true yet, and a list of the proof to keep.
What the renewal questionnaire asks, question by question
Every carrier words it differently, so your own form is the final word. These are the groups that show up again and again.
Email and remote access
Is MFA required for every user on email and on any remote login? Is it required for admin accounts? If it is on for some people only, the honest answer is usually no.
Backups
How often do you back up, where do the copies live, are they kept apart from your main network, and have you tested a restore? The restore test is the part most offices skip.
Devices and patching
Is endpoint protection on every computer? How fast do you install critical updates? Do you still run anything the maker no longer supports?
People and plans
Do you train staff on phishing? Is there a written incident response plan? Do you verify wire transfer and payment change requests by calling a known number?
Vendors
Who else has access to your systems, and is their access limited and reviewed?
What proof to gather before you sign
Insurers care about whether a control is enforced and whether you can show it. Collect these now, while you have time.
- A screenshot of your MFA policy showing who it covers.
- A backup report with the date of your last restore test.
- A device list showing endpoint protection on each one.
- Your patching or update settings.
- A training sign in sheet with dates.
- Your written incident plan, even if it is one page.
Keep the evidence in one folder with the signed application. If a question comes up at claim time, you will want it handy.
The mistake that costs the most
Checking yes on a box that is only partly true. If you say MFA covers all remote access and one login has none, that gap can come back at claim time. If a question is unclear, ask your broker what the carrier means before you answer.
If you are early enough, you can fix gaps before the deadline. Start 60 to 90 days before renewal. For more on how carriers think, see the Cyber Insurance Readiness Check page.
How much does the help cost?
The Cyber Insurance Readiness Check is a remote review of your real environment, done from your questionnaire. It is a fixed price by seat count. Ask for a quote at lonestarcomputersecurity.com or call 469-248-5463 and tell me how many seats you have.
50% of the fee is credited toward remediation booked within 60 days. See what the readiness check covers.
Want to do it yourself first? The Professional Kit below has a cyber insurance readiness checklist, an evidence tracker and a gap action list for $99.
Watch the 30 second overview
Two ways to get ready for a cyber insurance application or renewal.
Frequently asked questions
How early should I start the cyber insurance renewal questionnaire?
Give yourself 60 to 90 days before the renewal date. That is enough time to fix a gap such as MFA on one more system, then answer yes honestly.
What if I cannot answer yes to a question?
Answer honestly. A true no is safer than a yes you cannot prove. Then ask your broker whether the carrier accepts a plan to fix it, and put the fix on your calendar.
Will you fill out the renewal questionnaire for me?
I help you answer it accurately. I check your real settings, mark each answer ready, fixable or not true yet, and help you organize proof. You or your broker submit the form, and you sign it.
Can you promise my policy will be renewed?
No. The carrier makes the decision and sets the price. I help make sure your answers are accurate and your evidence is in order. Anyone who promises approval is guessing.
What does the readiness check cost?
It is a fixed price by seat count. Ask for a quote at lonestarcomputersecurity.com or call 469-248-5463. Fixing any gaps is separate and I quote it before any work starts.
Start Today With a Security Readiness Kit
Prefer to work at your own pace? Our editable Word templates put your policies and checklists on paper in plain English. Every tier includes an explainer video.
Starter Kit
Ten ready to customize security policies and four checklists, as editable Word templates in plain English.
Buy the Starter KitProfessional Kit
Everything in Starter, plus a cyber insurance readiness checklist pack and a 30 day implementation guide.
Buy the Professional KitComplete Kit
The full kit, plus HIPAA and WISP template add on packs and IRS references for tax preparers.
Buy the Complete KitSee every document in each tier in the full Security Kit details.
Templates only, not legal advice. Digital download. All sales are final, no refunds.
Talk to Scott
Call 469-248-5463. Remote service for DFW, Texas and anywhere in the US. Scott has 28 years in IT and holds CompTIA Security+ CE.