← All guides

Cyber insurance questionnaire: what the insurer checks

Before covering you against cyber risk, the insurer asks you to fill in a questionnaire. It works like a small audit: your answers decide whether you are insurable, and at what price.

The measures most often requested

• Multi-factor authentication on remote access, e-mail and administrator accounts.
• Endpoint protection with a detection and response tool, beyond a basic antivirus.
• Backups that are isolated or immutable, with regular, recorded restore tests.
• Updates: organised management of security patches.
• Awareness training for staff, especially against phishing.

Why evidence matters here too

This questionnaire is a declaration. If you declare a measure that is not really in place, the insurer may rely on it after a claim. Answering “yes” without being able to prove it is a risk, not a time saver.

How to prepare

1. Go through each question and look for the evidence before answering.
2. Where a measure is missing, put it in place before signing, or declare it absent.
3. Keep your dated evidence: it will serve again at renewal and for your customers.

Requirements vary from one insurer to another: ask your broker for the questionnaire before you prepare.

Hadovia gathers this evidence from your systems, and the same evidence serves your customers’ questionnaires.