Test Cyber Form

Within the last 3 years has Named Insured suffered any cyber incidents resulting in a claim in excess of $25,000?

Is Named Insured aware of any circumstances that could give rise to a claim under this insurance policy?

How many customer PII or PHI records does Named Insured have?

Does insured maintain at least weekly backups of all sensitive or otherwise critical data and all critical business systems offline or on a separate network?

Where is your data backup stored? (check all that apply)

Does Named Insured require a secondary means of communication to validate the authenticity of: Funds transfer requests (ACH, wire, etc.) before processing a request in excess of $25,000?

Does Named Insured require a secondary means of communication to validate the authenticity of Any request to change banking details (ACH, wire, payroll distribution, etc.)?

Do you enforce Multi-Factor Authentication (MFA) for email?

Do you enforce Multi-Factor Authentication (MFA) for Virtual Private Network (VPN)?

Do you enforce Multi-Factor Authentication (MFA) for Remote Desktop Protocol (RDP), RDWeb, RD Gateway, or other remote access?

Do you enforce Multi-Factor Authentication (MFA) for Network/cloud administration or other privileged user accounts?

Does Named Insured enable disk encryption on laptops, desktops, and other portable media devices?