simpl.
Sign in
Cybersecurity GRC 18 items

Cyber Insurance Readiness Assessment

Prepares an organization for cyber insurance underwriting and renewal by validating the technical controls carriers commonly require and ensuring application accuracy and documentation.

NIST CSFCIS v8NIST 800-53

Free PDF · enter your email to download.

Core Underwriting Controls

  • Is MFA enforced on email, remote access, and privileged accounts? *
  • Is EDR/managed detection deployed across endpoints and servers? *
  • Are immutable or offline backups maintained and tested? *
  • Is privileged access managed with least privilege and separation from daily accounts? *
  • Is email filtering with anti-phishing and DMARC in place? *

Program Maturity

  • Is a documented incident response plan tested within the past 12 months? *
  • Is a vulnerability and patch management program operating on defined SLAs? *
  • Is security awareness training delivered organization-wide? *
  • Is network segmentation in place to limit lateral movement?
  • Is end-of-life/unsupported software identified and remediated or compensated?

Application Accuracy

  • Are the answers on the insurance application verified as accurate and evidenced? *
  • Is documentation retained to substantiate each attested control? *
  • Are material control changes reported to the carrier when they occur?
  • Is the person attesting to the application authorized and informed? *

Incident & Claims Preparedness

  • Are policy coverage, limits, sublimits, and exclusions understood by leadership? *
  • Are carrier notification requirements and timelines documented in the IR plan? *
  • Are the carrier's approved incident-response and legal panel contacts on file?
  • Are preservation-of-evidence requirements for claims understood?

Download the full Cyber Insurance Readiness Assessment checklist

Get it as a clean, printable PDF — free.