Cyber insurance enquiry form

You are not aware of any loss data loss or data network outages lasting longer than 8 hours or costing your business more than GBP10,000 during the last 3 years.

Has any Director, Manager, Partner or Trustee been previously declared bankrupt, insolvent or gone into liquidation or have outstanding CCJ’s, had previous conviction(s) of a criminal offence other than a motoring offence or had Insurance previously declined/renewal refused or special terms imposed.

Proposer is compliant with the above Standards

Anti-Virus software and Anti Spyware installed and updated in accordance with suppliers recommendations.

Firewall in place for all external gateways and updated in accordance with suppliers recommendations.

You or your IT outsourced service provider, have a patch management policy in place to implement critical patches within 30 days of their release.

You have Multi Factor Authentication (with a randomly generated token) enabled for remote access including for Microsoft Office 365 (if used).

You do not allow remote access into your environment with a virtual private network (VPN).

You regularly (at least annually) provide cyber security awareness training, including anti-phishing, to all individuals who have access to your organisation’s network or confidential/personal data.

You back-up critical data at least weekly to a “cold” or “offline” location that would be unaffected by an issue with your live environment.

You test to ensure those backups are recoverable.

At least two members of staff review and authorise any transfers or funds signed of cheques or the issuance of instructions for the disbursement of assets, funds or investments above GBP10,000. You verify all requests to change customer/vendor/supplier details by confirming via a direct call, using the existing contact information previously provided and on file from the entity requesting the change. If online banking software or systems are used to perform wire or banking transfer functions, you use multi-factor authentication in order to gain access to the banking port and also for any transfers.