사이버보안 GRC 18개 항목
Cyber Insurance Readiness Assessment
이 체크리스트는 영어로 제공됩니다.
Prepares an organization for cyber insurance underwriting and renewal by validating the technical controls carriers commonly require and ensuring application accuracy and documentation.
NIST CSFCIS v8NIST 800-53
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Core Underwriting Controls
- Is MFA enforced on email, remote access, and privileged accounts? *
- Is EDR/managed detection deployed across endpoints and servers? *
- Are immutable or offline backups maintained and tested? *
- Is privileged access managed with least privilege and separation from daily accounts? *
- Is email filtering with anti-phishing and DMARC in place? *
Program Maturity
- Is a documented incident response plan tested within the past 12 months? *
- Is a vulnerability and patch management program operating on defined SLAs? *
- Is security awareness training delivered organization-wide? *
- Is network segmentation in place to limit lateral movement?
- Is end-of-life/unsupported software identified and remediated or compensated?
Application Accuracy
- Are the answers on the insurance application verified as accurate and evidenced? *
- Is documentation retained to substantiate each attested control? *
- Are material control changes reported to the carrier when they occur?
- Is the person attesting to the application authorized and informed? *
Incident & Claims Preparedness
- Are policy coverage, limits, sublimits, and exclusions understood by leadership? *
- Are carrier notification requirements and timelines documented in the IR plan? *
- Are the carrier's approved incident-response and legal panel contacts on file?
- Are preservation-of-evidence requirements for claims understood?
Cyber Insurance Readiness Assessment 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.