Interactive · Free

Would your business pass a cyber-insurance application?

Thirteen yes / no questions, two minutes, no email required. We'll score your readiness against the controls Canadian insurers weigh most — and flag the gaps most likely to get an application declined or a claim denied.

  1. 1 Is multi-factor authentication enforced on email for every user, with no exceptions?
  2. 2 Is MFA enforced on all remote access — VPN and remote desktop (RDP)?
  3. 3 Is MFA enforced on every administrator and privileged account?
  4. 4 Is modern endpoint protection (EDR) deployed on essentially all devices — not just most?
  5. 5 Do you have offline or immutable backups that were test-restored in the last 12 months?
  6. 6 Are security logs collected and actively monitored — by your team or a managed provider, ideally 24/7?
  7. 7 For every control above, could you produce evidence (reports or screenshots) that it is enforced across all accounts and devices?
  8. 8 Have all staff completed security-awareness training, with phishing simulations, in the last 12 months?
  9. 9 Are critical security patches applied to operating systems and key apps within 30 days?
  10. 10 Do you have a written incident response plan that has been tested in the last 12 months?
  11. 11 Do you run email filtering / anti-phishing protection on inbound mail?
  12. 12 Are administrator rights limited to the people who need them and reviewed regularly?
  13. 13 Are critical systems and backups separated from the rest of the network (segmentation)?

Renewal or application coming up?

Book a no-obligation consultation and we'll help you close the gaps insurers care about — and give you the evidence to back up every answer on the questionnaire.

Talk to our team