Contact Name

Worry less about cyber risk.Spend less on cyber insurance.


I need help with my insurance application

Does the Applicant allow any remote access to connect to its computer network?

Does the Applicant use multi-factor authentication (“MFA”) for all remote access to the Applicant’s computer network?

Has the Applicant ensured that Remote Desktop Protocol is not accessible via the internet?

Are administrative privileges restricted to specific users on the Applicant’s computer network?

Are all systems and data on the Applicant’s computer network backed up at least weekly?

Applicant’s backup strategy includes offline (archive) backups stored onsite

Applicant’s backup strategy includes offline (archive) backups stored offsite.

Applicant’s backup strategy includes onsite, regular backups

Applicant’s backup strategy includes offsite, regular backups (Cloud or Continuity of Operations Site).

Applicant's backups are isolated and separate from the production domain (i.e., they are accessed via an authentication mechanism outside of Active Directory or are otherwise available even if the production domain is compromised) or they are immutable.

Select all responses that are true: With respect to the Applicant's backup capabilities:

Does the Applicant download, test, and install security patches within 30 days of release on the Applicant’s computer network (including all hardware and software publicly accessible through the internet)?

How frequently do you install security software updates and critical patches?

Is it the policy of the Applicant to use encryption to secure sensitive or confidential information?

The Applicant requires that all data on portable devices - including phones, tablets, and laptops – is encrypted (using full disk encryption or file based encryption)

The Applicant requires that all end user devices - even if not portable - containing sensitive data must use full disk encryption.

The Applicant requires that all removeable media - USB sticks, CDs, etc. - is encrypted

The Applicant requires that all sensitive data at rest is encrypted (at either the storage layer or application layer).

The Applicant requires that sensitive data sent via Email is encrypted

Worry less about cyber risk.
Spend less on cyber insurance.

https://www.shieldupcyber.com/