Your insurer's security application asks whether you have MFA, endpoint detection, tested backups, email filtering and an incident response plan. We go through it with you and mark which controls you can honestly attest to today, and which need work before renewal. An inaccurate answer can put a claim at risk, so it is better to know now.
Tell us your insurer and renewal date. We'll reply so you can send the questionnaire securely.
We won't sell your data or send you marketing you didn't ask for.
Cyber insurance applications have turned into detailed security questionnaires. Many ask directly about multi-factor authentication, endpoint detection and response, backups, email security and end-of-life systems, and the answers are part of what the policy relies on.
The review suits owners, controllers and office managers who have been handed the application with a renewal date attached and are not certain every yes is accurate. It does not replace your broker, and we do not sell insurance.
If you want the background first, our guide to cyber insurance IT requirements explains what insurers tend to ask for and why. This page is the practical version: your actual questionnaire, reviewed line by line, at no charge.
Related: cyber insurance IT requirements in Canada, free Microsoft 365 security check, free email security check and free external vulnerability scan.
Cyber Insurance IT RequirementsThe review is about accuracy: matching the questionnaire to what is actually in place. Knowing where it stops matters as much as what it covers.
You stay responsible for the answers you sign. We help you make them accurate. If gaps need closing before renewal, that work is quoted separately and only if you ask.
Applications differ by insurer, but most return to the same handful of controls. We go through each one on your form and compare it with what is actually configured.
Where MFA is enforced and where it is not: email, remote access, admin accounts and cloud services.
Whether devices have EDR rather than basic antivirus, and whether anyone actually watches the alerts.
How backups are kept, whether they are separated from the main network, and when a restore was last tested.
Filtering, impersonation protection and domain authentication: the controls behind most email questions.
How updates are applied, and whether unsupported systems are still running somewhere in the business.
Who holds admin rights, whether admin accounts are separate, and how access is removed when people leave.
Whether there is a written plan with names and phone numbers in it, and whether anyone knows where to find it.
Whether staff training and phishing tests are in place and recorded, where your application asks about them.
There is no file upload on this page. Tell us the insurer and renewal date, and we reply with a secure way to send the questionnaire.
Insurer, renewal date, approximate number of users and a contact.
We reply with a secure way to share the questionnaire and any notes about your current setup.
Each question marked in place, partial or needs work, with what evidence would support a yes. Usually within a few business days.
We go through the gaps in order of urgency before your renewal date. There is no obligation to become a client.
If your renewal date is close, tell us when you ask. We will be straight about what can realistically be fixed in the time.
In place, partial or missing, with a short reason for each.
The items most likely to matter to an underwriter sit at the top.
What you could show if asked to back up an answer, such as a policy, a report or a configuration screenshot.
Whether each gap is a quick configuration change or a project that needs planning.
Where the wording is ambiguous, the questions worth raising with your broker before you answer.
If your controls already match what you are attesting to, we will tell you that plainly.
An answer on an insurance application is a statement you sign. We would rather tell you that a yes is really a partly before renewal than have it come up after a claim.
No. We do not sell insurance or advise on policy choice, limits or premiums. That is your broker's job. We look at the security controls the application asks about and help you answer accurately.
There is no upload on this page. Tell us the insurer and renewal date, and we will reply with a secure way to send the form and any supporting notes.
No. You remain responsible for the answers you sign. We mark which controls you can honestly attest to, explain why, and point out where an answer would currently be inaccurate.
Tell us the date when you ask. We will prioritize the questions most likely to matter and be honest about what can and cannot be fixed in the time.
No. The review is free and carries no obligation. Some organizations take the gap list straight to their current IT provider, which is a perfectly good outcome.
The guide explains what insurers tend to ask for in general. The review applies that to your actual questionnaire, line by line, against what is really in place.
We run these controls for clients every day, including 24/7 security monitoring, managed EDR, Microsoft 365 security and backup and recovery, and we are SOC 2 Type 2 audited ourselves. We know what these questions are really asking.
Tell us your insurer, renewal date and roughly how many users you have. We'll reply so you can send the questionnaire securely. NetFusion Designs is SOC 2 Type 2 audited, with offices in Markham, Toronto, Kitchener, Mississauga, Pickering and Montreal.
%20(1).avif){kind=logo}
%201.avif)
