The “Are We Insurable?” Rock-Solid Checklist

Use this 3-minute, plain-English tool to find potential gaps in your cybersecurity. An insurance underwriter will ask these exact questions.

Plain English: This is the alarm code you enter *after* you use your house key. It’s a code from your phone that stops a hacker even if they’ve stolen your password.

Plain English: This is the main “digital anchor” for your office. It’s a business-grade security guard at your internet’s front door, blocking threats from ever getting in.

Plain English: Old antivirus is a guard with a list of “known criminals.” EDR is a modern guard that looks for *suspicious behavior* (like someone picking a lock) and stops threats *before* they’re on a list.

Plain English: Is your backup in a “digital fireproof safe”? A backup on a USB drive plugged into your server will be destroyed in an attack. Yours *must* be separate (off-site or in the cloud) and tested regularly.

Plain English: Your tech is your “anchor,” but your team is the “crew.” If a crew member unties the rope (by clicking a bad link), the ship is still in danger. We have to train the crew.

Plain English: An un-updated program (like Windows, Zoom, or Adobe) is like a broken window on your ground floor. It doesn’t matter how good your front door lock is; hackers will just climb in the open window.

Plain English: This is your “fire drill.” When the alarm goes off, you don’t start looking for the exit. You *must* have a written plan that says exactly what to do and who to call.