Defend
Insurer and client questionnaires
A corporate client’s questionnaire before it instructs you, your insurer’s at renewal: we answer them with what’s true today, close the gaps first, and keep every answer for the next one.
An answer that’s true today, or a claim that fails later.
Security questionnaires arrive at the worst moments: from a corporate client the week before it instructs you, from your insurer a month before renewal, from an investor’s due diligence in the middle of a deal. Each runs to pages of questions about multi-factor sign-in, admin accounts, backups, patching, incident plans and who can see what. The temptation is to tick what should be true. The risk is that a claim, an audit or an incident later finds the difference, and an answer that wasn’t true can cost you the cover. So we answer with what’s true today, from your evidence file, close the gaps first where we can, and say plainly what isn’t in place. Every answer then goes into a library, so the next questionnaire starts half done.
What we do
Answered from the record, gaps closed first.
The questionnaire comes to us; you get back answers you can sign, and a short list of what we closed or what you should decide.
-
Each question mapped to the file
Every question is answered from your evidence file: how sign-in is protected, who holds admin rights, when a restore was last tested. Not from memory, not from what the brochure says.
-
Gaps found before the answer goes out
Where the honest answer is “no”, you hear it first. Many gaps can be closed in the weeks before renewal: a second factor for the last accounts, a restore test, an access review. Then the answer is “yes”, and true.
-
What stays open, said plainly
Where a gap can’t be closed in time or you decide not to close it, the answer says so, with the reason. A known gap is a line on a plan; a wrong tick is a claim that fails.
-
The insurer’s wording, your firm’s facts
Questionnaires use their own terms. We translate them into what your setup actually does, so an answer isn’t wrong because the question used a word your tenant doesn’t.
-
An answer library that grows
Every answer is kept, with the date and the evidence behind it. The next questionnaire, from a client, an investor or next year’s renewal, starts with most of its answers already written and checked against what changed.
-
The legal and contractual assessment stays with you
We answer the technical questions and show the evidence. What you commit to in a contract, what you declare to an insurer and what your regulator requires is assessed by you and your advisers.
On record
In your evidence file.
- Every questionnaire answered, with its date and the evidence behind each answer
- The gaps we closed before the answer went out, and when
- The gaps that stayed open, with the reason and the decision
- The answer library, kept current with your setup
So the question “what did we tell the insurer last year?” has an answer, and it still matches what’s in place.
What usually goes wrong without it.
-
Ticked, not checked
Multi-factor sign-in: yes. Tested backups: yes. Nobody checked the one shared mailbox without a second factor or when a restore was last tried. The claim is where it comes out.
-
Answered from scratch every time
Each questionnaire is a week of someone’s time, chasing the same answers from the same providers. Next year, the same week again.
-
The renewal that found the gap
The insurer’s questionnaire asks for something that isn’t in place, three weeks before renewal. Had anyone looked months earlier, it would have been a line on the to-do list, not a problem at renewal.
Also under Defend
- Email security Spam, phishing and malware filtered out before a mail reaches anyone, with long-term archiving.
- Multi-factor sign-in A second factor for every account, so a stolen password on its own opens nothing.
- Conditional access Who is signing in, from where and on which device, checked every time.
- Device protection Managed protection and threat detection on every laptop, workstation and server, to a documented baseline.
- Patching and vulnerability management Updates rolled out from one place, and the gaps that remain found and closed.
- Admin access Admin rights for few, by name; passwords in a vault; every use logged. Our own keys first.
- Backups and restore tests Backed up, restored on purpose before you need it, dated, and kept for the years you’re bound.
- Security monitoring Devices, sign-ins and systems watched centrally; what the monitoring found, reviewed by our engineers, and what we changed.
- Access reviews Who can open what, reviewed with you, so access that made sense last year doesn’t quietly stay.
- Incident response When someone clicks, or a server shows a ransom note: the same sequence every time, ending in the record.
- The evidence file What protects your firm, written down as it is, ready on the day an insurer, a client or an auditor asks.
- Changing provider The old provider’s software and access removed, with a written check that nobody keeps a way in.
Questions we get
Can you fill in our cyber insurance questionnaire for us?
We answer the technical questions from your evidence file and give you answers you can sign, with what we closed and what stays open. What you declare to the insurer is your declaration, so you see every answer before it goes.
What if the honest answer is “no”?
Then you hear it first, with what it would take to make it “yes” and how long that takes. Many gaps close in the weeks before a renewal. Where one doesn’t, the answer says so plainly, which insurers and clients take far better than a tick that fails later.
Do you handle client questionnaires and investor due diligence too?
Yes. Corporate clients’ security questionnaires, investors’ due-diligence questions and tender requirements all ask about the same controls in their own words. The answer library carries across, so each one starts half done and is checked against what changed.
Does this make us compliant with our regulator?
It gives you accurate answers and the evidence behind them. Whether that meets your professional rules, your supervisor’s requirements or a client’s contract is a legal and regulatory assessment that stays with you and your advisers.
Start
When is your next questionnaire due?
In a first call we go through the questionnaires you expect this year, what your answers would be today, and which gaps could close before they’re due.
- No first level
- No surprises
- Pilot before you buy