01 · Identity & accesscritical
Cyber-insurance readiness assessment
Answer based on what is true today. “Unknown” is useful—it marks where evidence still needs to be verified before the result can carry strong confidence.
0 of 10 answered
02 · Identity & accesscritical
Is MFA required for all business email accounts?
03 · Identity & accesscritical
Do all remote connections require MFA?
04 · Endpoint securitycritical
Is endpoint detection and response deployed across company computers?
05 · Endpoint securityhigh
Are company laptops and portable devices encrypted?
06 · Endpoint securityhigh
Are critical security patches normally installed within 14 days?
07 · Backup & recoverycritical
Are backups isolated, offline, or immutable?
08 · Backup & recoveryhigh
Has the company completed a documented restoration test in the last 12 months?
09 · Organizationmedium
Do employees complete recurring security and phishing awareness training?
10 · Organizationhigh