Serving Dallas businesses since 2000

Free tool · No sign-up

Cyber Insurance Readiness Check

Answer 14 common cyber insurance questions and get a plain-English list of what to fix before your renewal. Free, instant, no sign-up.

Answer 14 questions

Answer for your business as it is today. Free and no sign-up: your answers stay in your browser unless you ask us to email you the report. Not sure? Pick “Not sure”; that counts as a gap to look at.

Sign-in and access

1. Is multi-factor authentication (MFA) required for every email account, including administrators?

Stolen email passwords are one of the most common ways in, and MFA is one of the controls renewal forms ask about most often.

2. Is MFA required for remote access, such as a VPN, remote desktop and cloud admin consoles?

Remote access is a favorite target, and applications often ask about it separately from email.

3. Do administrators use separate accounts for admin work, and is the number of administrators kept small?

If your everyday account is also an administrator, one phished password hands over everything.

4. When someone leaves, is their access to email, files and devices shut off the same day?

Old accounts that stay active are an easy way in and are often asked about.

Protection

5. Do all company computers and servers run current endpoint protection that someone monitors, not just a free antivirus nobody checks?

Insurers commonly ask whether endpoint protection is in place on every device and whether it is actively managed.

6. Is email filtered for phishing and malicious attachments beyond the basic spam filter?

Most attacks start with an email, so applications ask what sits between the attacker and your staff.

7. Are operating systems and key software updated on a schedule, with nothing still running unsupported software?

Unpatched and end-of-support systems are a common cause of ransomware, and a common application question.

8. Is your network protected by a business-grade firewall with current firmware?

The firewall is the front door of your network, and out-of-date ones are actively exploited.

Backups and recovery

9. Are backups kept where ransomware cannot reach them (offline, immutable, or in a separate cloud account)?

Ransomware often encrypts connected backups too. Insurers commonly ask whether you have a copy it cannot touch.

10. Has someone tested restoring from backup in the last 12 months?

A backup you have never restored is a hope, not a plan, and applications often ask when it was last tested.

11. Is your cloud email and file data (Microsoft 365 or Google Workspace) backed up separately from the provider?

The cloud provider keeps your data available, but deleted or encrypted data may not be recoverable.

People and plans

12. Do staff get security awareness training at least once a year, including simulated phishing tests?

People are the most common way in. Insurers commonly ask whether staff are trained and tested.

13. Do you have a written incident response plan: who to call (IT, your insurer, your bank, a lawyer) and what not to do?

Hours matter in an incident. Insurers commonly ask whether you have a plan and who is on it.

14. Is a payment or bank-detail change confirmed by a second person, or by a call to a known number, before money moves?

Fake-invoice and wire fraud are among the most common and most costly small-business losses, and applications ask about it directly.

This check lists common insurer questions. It is not insurance or legal advice and does not predict coverage, eligibility or price. Talk to your insurance agent about your policy.

What is a cyber insurance readiness check?

Cyber insurance applications and renewals ask a familiar set of questions about how your business protects its accounts, devices, data and money. This free check walks you through 14 of the most common ones, scores how ready you are to answer them, and gives you a short list of what to fix first, in plain English.

It takes about three minutes. You get your results instantly, you don’t have to sign up, and your answers stay in your browser unless you choose to email yourself the report.

What the check covers

  • Sign-in and access: multi-factor authentication, remote access, administrator accounts and what happens when someone leaves.
  • Protection: endpoint protection, email filtering, updates and your firewall.
  • Backups and recovery: backups ransomware can’t reach, tested restores and cloud data.
  • People and plans: staff training, an incident response plan and how payment changes are confirmed.

What your result means

  • Ready: you could answer most common insurer questions with a confident yes. Keep it that way.
  • Close: a few answers are likely to be a problem at renewal. The fixes are mostly quick.
  • Gaps to fix: several common questions would get a no or a not-sure. Start with the “fix these first” list.

This check lists common insurer questions. It isn’t insurance or legal advice, and it doesn’t predict coverage, eligibility or price. Your insurance agent can tell you what your policy requires.

Where to start

Multi-factor authentication is the question insurers ask most often, and it’s usually the quickest fix. Our guide to multi-factor authentication for small business shows how to roll it out. Our free Email Security Checker shows whether others can send email pretending to be your business.

Is this check really free?

Yes. There is no sign-up and no cost, and your answers stay in your browser. If you choose “Email me this report,” we use your email only for what you tick on the form.

Will this get me cyber insurance or lower my premium?

No. It helps you understand and prepare for common insurer questions. Coverage, eligibility and price are decided by insurers, and your insurance agent can explain what your policy requires.

Do you sell cyber insurance?

No. SOHO Logics is an IT provider. We help you close the technical gaps, and we can work alongside your insurance agent.

What if I answer “Not sure”?

That counts as a gap, because an application would also need a clear answer. A free IT assessment can find the answers for you.

Are my answers stored?

The check runs in your browser and nothing is sent to us unless you ask us to email you the report. In that case we keep your email, the result and what you ticked, so we can send the report and follow up only if you asked.

Want help closing the gaps? Start with a free, no-obligation IT assessment.

Book a Free Assessment
Glowing blue fiber optic strands

Free, no-pressure IT assessment

Let’s find out what your IT is really costing you.

In a 30-minute conversation we’ll review your current setup, flag any security gaps and give you a clear, flat-rate proposal. No obligation, no jargon.

Book My Free Assessment 469-212-0545