The cyber insurance questionnaire, answered line by line
What carriers mean by 24/7 monitoring, MFA everywhere and tested backups, and what evidence they accept.
Keisha Morrow, head of client security
9 min
Renewal questionnaires have grown from one page to twelve in four years. Most of the questions come down to three things: is someone watching at night, is MFA really on everywhere, and can you restore from a backup an attacker cannot reach.
24/7 monitoring
Carriers want a human who can act, not an alert that lands in an inbox. The evidence is a contract with response times and a report that shows the hours were covered.
MFA everywhere
This means email, remote access, admin accounts and backups. The question that catches most companies is admin accounts on the backup system itself.
Tested backups
A restore test with a date on it, from storage that an administrator account cannot delete. Immutable is the word to look for.
Thirty minutes to find out who is watching your network tonight.
Bring your last insurance questionnaire or audit finding. We tell you in plain words where you are exposed after hours and what closing it would cost, then send a written quote within two business days.