Cyber insurance

Insurance finances some losses and increasingly dictates what controls you must have.

Insurers now require MFA, tested backups, endpoint detection and evidence of them, and will decline where the answers on the proposal form turn out to be optimistic. That is quietly one of the more effective drivers of baseline security improvement, and it also means the policy wording has become a de facto standard.