Last updated: 7 November 2026
Most cyber insurers now expect multi-factor authentication on email and remote access, endpoint detection and response on every device, tested backups, prompt patching with no unsupported software, an incident response plan and staff awareness training. Missing controls can raise premiums, add exclusions or lead to a declined claim.
The insurer’s checklist
| Control | What insurers usually ask | Our answer |
|---|---|---|
| Multi-factor authentication | On email, remote access and admin accounts | What is MFA? |
| Endpoint detection and response | EDR on every laptop, desktop and server | What is EDR? |
| Backups | Tested, protected and ideally offline or immutable | Microsoft 365 backup |
| Patching and supported software | Critical updates quickly, nothing end of life | How often to patch |
| Incident response plan | Written, with named contacts and tested | Incident response plan |
| Awareness training | Regular training and phishing simulations | Awareness training |
| Email security | Filtering, SPF, DKIM and DMARC | Business email compromise |
Why answers matter
Proposal forms are signed statements. If you tick “MFA everywhere” and a claim reveals gaps, the insurer may reduce or refuse payment. Check every answer against reality before you sign, and keep evidence such as MFA settings, EDR coverage reports and backup test logs.
- Run a gap check before renewal, not after a quote arrives
- Remove or replace unsupported software, see end of life dates
- Hold Cyber Essentials, which many insurers recognise and which can help with terms
How ABCOM helps
We map your controls to the insurer’s questions and fix the gaps. See What does cyber insurance cover? and What if we already have cyber insurance?
Quick answers
Does Cyber Essentials reduce cyber insurance cost?
Some insurers recognise Cyber Essentials and may offer better terms or inclusion. It is not a guarantee, so ask your broker how it affects your quote.
Can an insurer refuse a claim?
Yes, if answers on the proposal form were inaccurate or required controls were not in place. Always verify each statement before you sign.
Renewal coming up? We will check your controls against the usual insurer questions.
Related answers and guides
- What does cyber insurance cover?
- What if we already have cyber insurance?
- What is EDR?
- What is MFA?
- All ABCOM FAQs
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about cyber security services. Free, friendly and no obligation.