Plain-language guide
Questions to Ask Before Buying Cyber Insurance
The short answer
Ask what the policy pays. Ask what it leaves out. Check the limits and the rules. Get the full forms. Make sure your application answers are true. Keep a copy and the facts behind each answer.
Written by Joseph Boyd, MBA, Founder and Principal Advisor at Infosec Check
Published
Editorial note: this guide uses primary references and is checked when policy or legal guidance changes.
Bring these questions to the discussion
Use the list with a licensed insurance professional. Ask them to show the answer in the policy or quote documents.
This is a discussion checklist, not a score or a compliance test. Your ticks stay on this screen only and are not saved or sent anywhere.
Three things to have in hand
The coverage: The quote, full forms, added forms, and any exclusions.
The facts: The completed application and evidence behind important answers.
The contacts: The agent, the insurer’s claims contact, and the response instructions.
One question for your IT provider
“Can you show us where each security answer is true?”
Give them the actual application questions. “We have backups” is not a full answer if the question asks about testing, protection, or specific systems.
One question for the owner
“Who will check these answers and keep them current?”
Assign the work. Keep track of open questions. Review changes before renewal and when the business, systems, or providers change.
Keep insurance and compliance connected
The rules that apply to your business may require security work whether or not you buy insurance. Start by checking your industry, licenses, activities, and information.
Review your regulatory scope. For deeper preparation, use the existing claim-readiness checklist and executive readiness guide.
Ready for a review?
Scope
This guide gives general information. It does not decide a claim or change a policy. Coverage depends on the policy, its added forms, the facts, and the law. Ask a licensed insurance professional about your coverage and a lawyer about legal questions.
Sources
Back to the cyber insurance basics hub: What Is Cyber Liability Insurance Coverage?