网络安全 GRC 18 项
Cyber Insurance Readiness Assessment
此检查清单为英文版。
Prepares an organization for cyber insurance underwriting and renewal by validating the technical controls carriers commonly require and ensuring application accuracy and documentation.
NIST CSFCIS v8NIST 800-53
免费 PDF 或 Word · 输入邮箱即可下载。
Core Underwriting Controls
- Is MFA enforced on email, remote access, and privileged accounts? *
- Is EDR/managed detection deployed across endpoints and servers? *
- Are immutable or offline backups maintained and tested? *
- Is privileged access managed with least privilege and separation from daily accounts? *
- Is email filtering with anti-phishing and DMARC in place? *
Program Maturity
- Is a documented incident response plan tested within the past 12 months? *
- Is a vulnerability and patch management program operating on defined SLAs? *
- Is security awareness training delivered organization-wide? *
- Is network segmentation in place to limit lateral movement?
- Is end-of-life/unsupported software identified and remediated or compensated?
Application Accuracy
- Are the answers on the insurance application verified as accurate and evidenced? *
- Is documentation retained to substantiate each attested control? *
- Are material control changes reported to the carrier when they occur?
- Is the person attesting to the application authorized and informed? *
Incident & Claims Preparedness
- Are policy coverage, limits, sublimits, and exclusions understood by leadership? *
- Are carrier notification requirements and timelines documented in the IR plan? *
- Are the carrier's approved incident-response and legal panel contacts on file?
- Are preservation-of-evidence requirements for claims understood?
下载完整的Cyber Insurance Readiness Assessment检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。