Getting ready for a cyber insurance questionnaire

    Prepare for a cyber insurance questionnaire by checking the controls you actually use and keeping evidence for each answer. We help small businesses assemble technical evidence, with account hardening from £2.50 per user monthly, plus VAT; we are not insurance brokers and do not give insurance advice.

    Security analysis at a computer workstation

    Answer your actual form

    Use the insurer's definitions and ask your broker to clarify ambiguous wording. The checklist below is a preparation aid, not a statement that every insurer asks the same questions or accepts the same evidence. Do not promise a control is universal when it covers only some staff or devices.

    Prepare evidence, not a tick-box claim

    Question to check on your formUseful evidenceRelevant service and starting monthly cost, plus VAT
    Is multi-factor sign-in enforced?Account coverage, exceptions and settings reviewAccount hardening from £2.50 per user
    Are backups separate and tested?Scope, last successful test and recovery recordMicrosoft 365 backup from £2.50 per user, included in support; server backup from £35 per server
    How are updates managed?Device inventory and update reportsPatching from £2.50 per device
    Do staff receive training?Attendance and phishing-exercise recordsTraining from £3.50 per user
    Which devices are protected?Protection inventory and exception listManaged antivirus from £2.50 per device; four-layer endpoint protection from £10 per device
    Is there an incident plan?Approved contacts, response instructions and exercisesPlanning quoted as a fixed fee after a free call

    Keep the answers accurate at renewal

    Record who checked each answer, the date and where the evidence is held. Revisit it when a new office, application or supplier changes the setup. Pass material questions about cover, exclusions or notification duties to your insurer or broker.

    We can explain our services and provide the agreed technical records. We do not guarantee an insurer's acceptance, a premium reduction or payment of a claim.

    A useful starting point

    The NCSC's Cyber Essentials overview describes five technical controls and distinguishes the independently tested Plus assessment from the standard assessment. Read NCSC Cyber Essentials overview.

    Certification can form part of an evidence pack, but answer the specific insurance question rather than treating a certificate as a substitute for checking your systems.

    What we can do for you

    We help you agree priorities, document workarounds and check the recovery arrangements. Continuity planning is quoted as a fixed fee after a free 30 minute call. The technical fallbacks use our standard prices.

    Technical fallbackFrom per month, plus VAT
    Independent Microsoft 365 backup£2.50 per user, included as standard in support agreements
    Email filtering£1.50 per user, not needed as an additional filter with Microsoft 365 Premium
    Server backup with cloud failover£35 per server
    Desktop and laptop backup£10 per device
    Business phone system£11 per user

    Monthly starting prices exclude VAT and use a 3 year term billed monthly. Shorter terms cost a little more. Your price and the actual fallback arrangements are confirmed in a written quote.

    Questions about this service

    Does a backup keep every service running?

    No. Backup provides a recovery copy. Alternative access, replacement equipment, staff instructions and decisions are separate parts of a continuity plan.

    Will you guarantee a recovery time?

    We agree targets after reviewing the systems, dependencies and test results. A planning target or example is not a contractual recovery guarantee.

    Is security monitoring an out-of-hours helpdesk?

    No. Our security partner's analysts provide the contracted 24x7 account monitoring. Normal support hours are Monday to Friday, 08:30 to 17:30, excluding UK bank holidays.

    Where should we start?

    Call 01494 866668 for a free 30 minute planning conversation. Describe the activity you could least afford to lose and the arrangements already in place.

    Free tools to help you prepare

    Continuity tools

    Use these planning aids to prepare a conversation. Do not put passwords or confidential records in a worksheet.

    Related information

    Talk to us about your business

    Call 01494 866668

    Prefer us to contact you? Request a call back.