Match every answer on your form to a piece of current evidence, and have the person who can verify each control confirm it before you sign. If you can't point to evidence, treat that answer as unverified until you can.
Carriers ask harder questions every year, and the person signing usually isn't the person who runs the systems. That gap is where wrong answers come from. Here's how to close it.
1. Get the actual form early
Ask your broker for this year's questionnaire as soon as you can. Questions change from year to year, so don't assume last year's answers still apply.
2. Read the exact wording
Look for words like "all," "every" and "enforced." MFA on most accounts is not MFA on all accounts. If a question is unclear, ask your broker what it means and get the answer in writing. If the honest answer is "mostly," ask your broker how to explain that on the application instead of checking "yes."
3. Collect evidence for each answer
| If the form asks about | Evidence to keep |
|---|---|
| MFA | A policy export showing where it's enforced for email, remote access and admin accounts, plus any exceptions |
| Backups | Recent job reports, proof of an offsite or immutable copy and the date of your last restore test |
| Endpoint protection | A console export listing every protected device, compared to your device list |
| Patching | A current patch report, with end-of-support systems flagged |
| Admin access | A list of admin accounts, plus proof that former employees were removed |
| Security training | Completion records with dates |
| Incident response | Your written plan, with its date and current contacts |
Your carrier's form may ask for different things, so build your list from its questions.
4. Ask your MSP for help, not reassurance
Your MSP can usually export most of this. Most MSPs are not the problem here. They often just haven't been asked. Try: "We need to back up these answers for our Cyber Insurance Renewal. Can you send the reports for these items?"
5. Fix gaps before you sign
When the evidence doesn't support the answer, you have two honest options: close the gap first, or give the accurate answer. Don't sign and plan to fix it later.
6. Keep a dated file
Save the signed form, the evidence and who confirmed each item in one folder. You'll want it if a claim is ever questioned, and it gives you a head start next year.
This is general information, not legal or insurance advice. Talk to your broker and attorney about your own policy.
Want someone to check it with you?
Cyber Insurance Renewal Readiness reviews your questionnaire line by line and works with your current MSP. See your timeline and pricing in about a minute.
See Cyber Insurance Renewal Readiness