Check if your business is ready for cyber insurance. Answer 10 questions about your current security controls — covering the exact controls insurers check — and we'll tell you whether you're likely to be approved, declined, or somewhere in between, and exactly what to fix.
The assessment takes about 3 minutes, gives instant results, and produces an actionable report with specific gaps and how to fix them.
The 10 Controls Assessed
The questions cover the controls insurers check most frequently:
- Multi-factor authentication (MFA) on all email accounts and remote access — the number one control insurers check; having no MFA is the most common reason for insurance decline, and partial MFA coverage is often flagged too
- Tested, offline or immutable backups of critical business data — cloud sync alone (OneDrive, Google Drive) does not count
- Patching of operating systems and critical applications within 14 days of updates being released
- Endpoint Detection & Response (EDR) or managed antivirus on all devices
- A documented and tested incident response plan, exercised through tabletop testing
- Regular cybersecurity awareness training for employees, ideally with phishing simulations
- Admin and privileged accounts that are limited to named individuals and separately managed with MFA
- Email filtering, DMARC, and anti-spoofing controls, including SPF and DKIM
- Encryption of sensitive data at rest and in transit
- Cybersecurity assessment of critical third-party vendors
How Scoring Works
Each question offers answer options scored from 0 to 3 depending on how strong the control is, giving a maximum of 30 points. Your total is converted to a percentage and mapped to one of four readiness levels.
The Four Readiness Levels
Insurance Ready (80% and above)
Your security controls are strong. You should have no difficulty obtaining competitive cyber insurance quotes. Consider getting quotes from multiple brokers to compare premiums — a strong posture should qualify you for preferred rates.
Nearly Ready (60-79%)
You have a reasonable foundation but some gaps that insurers may flag. A few targeted improvements could make the difference; most critical gaps can be addressed in 2-4 weeks.
Significant Gaps (40-59%)
Your application is likely to face challenges. Multiple controls that insurers consider mandatory are missing or incomplete. A structured remediation programme is strongly recommended before applying — Enterprise Ireland grants can cover up to €3,000 of the cost.
High Risk of Decline (below 40%)
Based on current controls, your application would very likely be declined. The good news: the most impactful fixes are also the quickest to implement. Start with MFA and backups — these two controls alone address the top reasons for decline.
What Your Results Include
- Your insurance readiness score as a percentage, with your readiness level
- A control-by-control breakdown marking each area as meeting insurer requirements, partial (may be flagged by insurers), or a critical gap (likely reason for decline)
- A tailored recommendation on what to fix first
- A downloadable PDF report of the assessment
Who It's For
Built for businesses applying for or renewing cyber insurance who want to know where they stand before the insurer tells them. The tool is free; you provide your contact details before starting, and results are shown on screen immediately.
From your results you can book a free remediation call, get insurance remediation help, check grant eligibility for up to €3,000 in funding, or run the full Security Maturity Assessment for deeper analysis.