Cyber Insurance Readiness Assessment

Q: What do I need for cyber insurance requirements?

Cyber insurance requirements vary by carrier, but most require MFA on email and remote access, endpoint detection and response (EDR) on all devices, regular tested backups, security awareness training, and a documented incident response plan. CyberStackHub's readiness assessment checks your score across these controls and shows you exactly what to fix before applying.

Q: How do I check my cyber insurance readiness?

Fill out the CyberStackHub Cyber Insurance Readiness Assessment — it takes about 2 minutes. You'll receive a readiness score, estimated premium range, and a prioritized list of fixes to improve your insurability before applying to a carrier.

Q: What cyber insurance questions do underwriters ask?

Underwriters typically ask about MFA deployment, endpoint protection, backup procedures, incident response plans, security training programs, vulnerability management, and claims history. CyberStackHub's assessment pre-answers these questions with your specific profile and security controls.

Q: How much does cyber insurance cost for small businesses?

Most small-to-mid-size businesses pay between $1,000–$10,000 per year for $1M in coverage. Premiums are driven by industry, annual revenue, security posture, claims history, and coverage limits. CyberStackHub gives you an instant estimated range based on your profile.

Q: Why do cyber insurance claims get denied?

40% of cyber insurance claims are denied — most commonly for pre-existing vulnerabilities, failure to maintain required security controls (like MFA), or misrepresenting the company's security posture at application time. CyberStackHub's readiness assessment surfaces these gaps before a carrier finds them.

CyberStackHub

Quick Readiness Check

Toggle the 4 carriers' must-have controls. No signup, instant.

Moderate Readiness

Toggle all four controls to see your preliminary score.

Get your full assessment →

Ready to apply? Book a free 15-min consultation with Corgi Insurance — independent brokers who compare 5+ carriers for SMBs.

Tell us about your company

Company Name *

Industry

Annual Revenue Range

Claims History

Current Security Measures

Desired Coverage Amount

Sample Assessment Output

Moderate Readiness

Sample Financial Services company · $5M–$25M revenue · Standard $3M coverage

GAP

MFA Not Deployed on All Email Accounts

Most carriers now require MFA on email and VPN as a minimum underwriting condition. This will likely trigger a coverage exclusion or premium surcharge.

MED

No Documented Incident Response Plan

Carriers require documented IR procedures. Absence typically increases premiums 15–25% or triggers exclusions on breach response coverage.

Endpoint Protection Deployed (EDR)

Active EDR solution satisfies carrier requirements for endpoint security. Qualifies for base coverage at standard rates.

GAP

No Vendor Security Review Process

Third-party risk is increasingly excluded without documented vendor assessments. Carrier questionnaire answer mapped here.

MED

Estimated Premium Range: $18,000–$26,000/yr

Based on revenue, industry, and current security posture. Breakdown by carrier profile included in full report.

Full carrier questionnaire answers + premium range in your personalized assessment

Start your 7-day trial to unlock coverage gap analysis, carrier comparison, and underwriter-ready answers.

Get My Insurance Assessment →

Analyzing security posture...

Analyzing security posture

Calculating readiness score

Estimating premium ranges

Identifying coverage gaps

SEEK EXPERT ADVICE

This output is AI-generated based on your inputs and is intended for guidance only. Consult a qualified cybersecurity professional before making compliance or risk management decisions.

Your Insurance Assessment

⚡ Cyber Pulse Stack

Get your full cyber insurance assessment — insurability score, coverage gap matrix, premium impact, and carrier prep Q&A

Run Full Assessment →

A -- / 100

Calculating...

Evaluating your security posture...

AIGenerated with AI assistance · Verify recommendations with a qualified professional

📋 Executive Summary

💰 Estimated Annual Premium Range

Low estimate

/ year

—

High estimate

/ year

For your selected coverage limit

Actual quotes vary. Improve your score to lower rates.

Detailed premium breakdown by risk factor: revenue tier impact, industry surcharge, claims history multiplier, security discount potential, and carrier-by-carrier comparison. Includes negotiation tips that can reduce your quote by 15–30%.

🔒

Detailed Premium Breakdown

See exactly which risk factors are driving your rate and how to reduce them.

🔧 Top Fixes Before Applying

🔒

3 more critical fixes

See all fixes ranked by premium impact so you know where to invest first.

🛡 Coverage Recommendations

First-Party Coverage

Recommended: $3M

Covers your own losses: breach response, business interruption, ransomware, data recovery.

Third-Party Liability

Recommended: $3M

Covers claims from customers and partners whose data was compromised due to your breach.

Regulatory Defense

Recommended: Include

GDPR, HIPAA, PCI-DSS fines and defense costs following a regulatory investigation.

Business Interruption

Recommended: 30-day window

Lost revenue while systems are down after a cyber incident. Critical for e-commerce and SaaS.

🔒

Full Coverage Recommendations

Tailored coverage limits, recommended riders, and carriers that specialize in your industry.

🔍 What Carriers Look For

🔒

Full Carrier Checklist

See every control carriers evaluate during underwriting, with how to document each one.

⚡ Cyber Pulse Stack

Get Your Full Cyber Insurance Assessment + Security Brief

The Cyber Pulse Stack goes deeper — full insurability score with gauge, coverage gap matrix, premium impact modeling, and carrier readiness Q&A pre-filled with your profile. Plus live threats, compliance snapshot, and remediation roadmap. Free in 60 seconds.

Run Full Cyber Insurance Assessment →

✓ Insurability score + gauge ✓ Coverage gap matrix ✓ Premium impact modeling ✓ Carrier readiness Q&A PDF ✓ Free, no signup required

Related Free Assessments

🔍 Security Audit Checklist

Comprehensive security controls review

🏢 Vendor Risk Assessment

Rate the risk of your third-party vendors

🎯 Pen Test Readiness

Know if you're ready for a pen test

🛡️ Cyber Insurance Requirements Guide

What insurers require and how to document it

Frequently Asked Questions

Cyber liability insurance is a policy that helps businesses recover financially after a data breach, ransomware attack, or other cyber incident. It typically covers costs including breach notification, forensic investigation, legal fees, regulatory fines, business interruption losses, and ransomware payments (where legal).

Cyber insurance premiums range from a few hundred dollars per year for small businesses with basic coverage to millions annually for large enterprises. Most small-to-mid-size companies pay between $1,000–$10,000 per year for $1M in coverage. Premiums are driven by industry, annual revenue, security posture, claims history, and coverage limits. Our free assessment gives you an estimated range based on your profile.

Cyber insurance typically excludes: pre-existing known vulnerabilities, acts of war (nation-state attacks in some policies), insider fraud above policy limits, reputational damage beyond specific coverage riders, and infrastructure improvements after an incident. Always review exclusions carefully — the best way to ensure coverage is maintaining strong baseline security controls.

Most carriers now require at minimum: multi-factor authentication (MFA) on email and remote access, endpoint detection and response (EDR) on all devices, regular encrypted backups tested for recovery, security awareness training, and a documented incident response plan. Higher-value policies also require privileged access management (PAM), vulnerability scanning, and network segmentation. Missing MFA alone can result in policy denial or exclusions.

Any company that stores customer data, processes payments, relies on IT systems for revenue, or faces regulatory requirements (HIPAA, PCI-DSS, SOC 2) should have cyber insurance. Practically speaking: if a ransomware attack would cost you more than your annual premium, you need coverage. Most companies should get coverage before their first security incident — not after.

Cyber insurance: calculator, readiness, risk assessment & limits benchmarking — what's the difference?

Cyber insurance buyers search with very different intents. This page is the canonical readiness hub; the four related pages below cover the other intents at full depth.

🧮 Cyber insurance calculator

If you want a quick directional premium number from your revenue, employee count, and data types — without answering a 20-question underwriting form — start with the Cyber Insurance Calculator. It pulls from Corvus and Coalition 2026 benchmark data to give a budget range in seconds.