Be ready when your cyber insurance questionnaire arrives.
A fixed-price security readiness sprint that maps common insurer controls to proof you can show.
The problem
Insurers now ask detailed questions and expect proof, not promises. Requirements vary by carrier, but common asks include multi-factor authentication on email, remote access, and admin accounts; endpoint detection and response (EDR) on computers and servers; backups that are protected from tampering and regularly tested; a written incident response plan; security awareness training; and a regular patching routine.
Partial coverage, such as MFA on email only, is a common reason applications are flagged. This page is general guidance. Your carrier may ask for more or less.
Important: Jack Creager Tech Services is not an insurance agency and does not sell insurance.
What you get
- Security assessment of email, devices, network, and backups
- MFA enforced across email, cloud apps, VPN/remote access, and admin accounts
- EDR/endpoint protection deployed and verified
- Email security (SPF, DKIM, DMARC, phishing protection)
- Password manager rollout
- Backup review with a real restore test
- Patching and update policy
- Written incident response plan (1 to 2 pages)
- Staff security awareness session (30 minutes)
- A Security Evidence Pack (screenshots and summaries) mapped to common questionnaire questions
How it works
-
Step 1
Assess
Review email, devices, network, backups, and admin access against common controls.
-
Step 2
Fix the gaps
Turn on MFA, deploy EDR, harden email, and fix backup weaknesses.
-
Step 3
Document
Build the evidence pack and a short incident response plan.
-
Step 4
Train and hand off
Run a 30-minute staff session and leave clear admin documentation.
Who it is for
Businesses renewing or applying for cyber insurance, businesses handling client payment or health data, or any owner who wants a solid security baseline.
Frequently asked questions
Do I need cyber insurance?
Many lenders, vendors, and larger clients now expect it. Jack is not an insurance broker. Speak with a licensed broker about coverage that fits your business.
What is EDR?
Endpoint detection and response is security software on computers and servers that looks for suspicious activity and helps contain threats faster than basic antivirus alone.
Will MFA slow my staff down?
Modern MFA (app prompts or hardware keys) adds a few seconds at login and blocks most credential theft. We pick methods that fit how your team works.
What if my backups run every night already?
Scheduled is not the same as tested. We verify restore works and that copies are protected from tampering.
Can you fill out the insurance questionnaire?
Jack can help supply accurate technical answers and evidence. The business owner must review and sign the application.
Do you guarantee I will not be hacked?
No. The goal is reducing risk and meeting common insurer controls. No honest provider can promise zero incidents.
Not sure where to start?
Book a free 30-minute IT checkup. We will look at your email, backups, network, and security, and tell you plainly what matters and what does not.