Cyber insurance questions you will fail on a Thursday
MFA everywhere? Offline backups? EDR? Privileged access? If you cannot evidence it, the answer is no.
ITSIGN Administrator · November 19, 2025 · 2 min read
Brokers will ask whether MFA covers remote access and email, whether backups are isolated and tested, whether you have EDR, and whether you train staff.
"We think so" is a no. Screenshots and a dated restore test are a yes.
We package that evidence in GRC and security audit.
Related reading
A board briefing that fits in ten minutes
Residual risk, open highs, last restore test, last simulation. Then stop talking.
2 min read
Vendor questionnaires that waste a week
Keep a living packet: MFA, backup, pentest date, policies. Answer from the packet, not from memory.
2 min read
SOC 2 readiness for a 40-person firm
You do not need a 20-person GRC team. You need owners, evidence locations, and a scope that matches the customer who asked.
2 min read
Want this applied to your environment?
A short conversation, an honest assessment of your current setup, and a clear proposal. No obligation and no pressure.