Free checklist

Pass your next security questionnaire or cyber insurance renewal.

Short answerThis free checklist lists the security controls and evidence that cyber insurers and larger customers ask about most, so you can find and fix gaps before your next renewal or questionnaire.

Insurers and larger customers ask many of the same security questions. This checklist covers the controls they ask about most and the evidence to keep on file, in plain language, with a box to tick for each one.

• Sign-in and accessMulti-factor login on email, remote access, cloud apps and administrator accounts, and how access is removed when people leave.
• Devices and endpointsEndpoint detection and response coverage, encryption, and how quickly security patches are applied.
• Backups and recoveryBackups kept separate from the network, restore tests and how long recovery would take.
• Email and peopleEmail filtering, sender verification records and security awareness training.
• Network and monitoringFirewalls, segmentation, unsupported systems and who watches the alerts, and when.
• Physical securityCameras, door access and visitor records for the places your systems and data live.
• Evidence to have readyThe reports, logs and sign-offs to keep on file so you can prove every answer.