All Services
Cyber Insurance Readiness

Give Your Insurer What They're Actually Asking For

Insurers now require structured evidence of identity controls before binding cover or at renewal. The Insurance Readiness Pack produces exactly that — MFA coverage, privileged separation, logging capability, and recovery readiness — packaged for underwriters, not just your security team.

Underwriter-ready evidence format    Read-only assessment    Typical turnaround: 5–10 business days

Book a Scoping Call View Sample Report

Why Insurers Focus on Identity

Over 80% of breaches now involve compromised credentials, over-privileged accounts, or identity misuse. Insurers know this — and their underwriting questionnaires increasingly reflect it.

Common questions you'll face at renewal or when applying for new cover:

  • What percentage of privileged accounts are protected by MFA?
  • How do you manage and review privileged access?
  • What is your process for detecting compromised credentials?
  • How quickly can you revoke access in the event of a breach?
  • Do you have evidence of periodic access reviews?
  • Are service accounts and non-human identities governed?

The Stakes at Renewal

Without structured evidence, insurers will either:

  • Increase your premium to reflect the unknown risk
  • Add exclusion clauses around identity-related incidents
  • Decline to renew your policy at existing terms
  • Dispute a claim on the grounds that controls were insufficient

The Insurance Readiness Pack gives you evidence-based answers — not assertions. The difference matters when a claim is under review.

Insurance Readiness Pack — What's Included

A structured evidence package covering the four areas insurers consistently ask about — plus a remediation plan for any gaps found.

1. MFA Enforcement Evidence

Coverage report showing MFA status across all user types — administrators, privileged users, standard users, and external accounts — across Active Directory, Entra ID, Okta, and other connected systems.

  • MFA coverage percentage by account type
  • Excluded accounts and exception register
  • Legacy authentication protocol exposure
  • Conditional access policy summary

2. Privileged Access Separation

Evidence that privileged accounts are identifiable, owned, and governed — including separation between admin and standard accounts, just-in-time access controls where applicable, and privileged account review status.

  • Privileged account inventory
  • Admin/standard account separation validation
  • Stale and orphaned privileged account identification
  • Non-human / service account governance status

3. Logging & Detection Capability

Evidence of logging coverage across identity systems — confirming that authentication events, privilege changes, and account modifications are captured and available for incident investigation.

  • Audit log coverage assessment
  • Retention period validation
  • Alert and detection capability summary
  • SIEM/log aggregation confirmation

4. Recovery Readiness

Evidence of your organisation's ability to respond to and recover from an identity-related incident — including emergency access paths, backup authentication capability, and account revocation speed.

  • Emergency access account validation
  • Account revocation process documentation
  • Recovery path assessment
  • Incident response readiness summary

Also Included

  • Executive summary suitable for your broker or risk team
  • Gap-remediation plan with prioritised actions
  • Estimated remediation effort for each gap
  • Review call to walk through findings

Timelines

  • Scoping call within 48 hours of enquiry
  • Assessment completed within 5–10 business days of access being granted
  • Report delivered in PDF + supporting evidence files
  • Expedited delivery available for urgent renewals

How It Works

01

Scoping Call

30-minute call to understand your environment, renewal date, and what your insurer is specifically asking for.

02

Read-Only Assessment

We use IdentityMRI to assess your identity estate. No agents. No changes. Credentials granted and revoked by you.

03

Evidence Pack Produced

Structured evidence package covering all four areas, with executive summary and gap-remediation plan.

04

Review & Hand-Off

Walkthrough call to review findings. You take the evidence pack directly to your broker or underwriter.

Renewal Coming Up?

Tell us when your renewal is and what your insurer is asking. We'll scope an engagement that produces the evidence they need — and the remediation plan to close any gaps before they ask again.

Book a Scoping Call All Services