isFormattedError

At least 1 is required if backupFrequency answer is not NEVER

At least 1 is required if backupFrequency answer is not NEVER

At least 1 is required if backupFrequency answer is not NEVER

Only applicable if quote is renewal

Civil or criminal action or administrative proceeding alleging violation of any federal, state, local or common law?

Are all internet-accessible systems (e.g. web, email-servers) segregated from the organization’s trusted network (e.g. within a demilitarized zone (DMZ) or at a third-party service provider)?

Does the organization have an incident response plan - tested and in-effect - setting forth specific action items and responsibilities for relevant parties in the event of cyber incident or data breach matter?

Do policy holder employees authenticate funds transfer requests (e.g. by calling a customer to verify the request at a predetermined phone number)? Affirmative answer is required to be eligible for Social Engineering endorsement

Do policy holder employees prevent unauthorized employees from initiating wire transfers? Affirmative answer is required to be eligible for Social Engineering endorsement

Does the policyholder agree to be the designated Information Security Contact?

Does policyholder provide mandatory information security training to all employees at least annually? If not, are they willing to implement it during the policy period?

Do policy holder employees verify vendor/supplier bank accounts before adding to accounts payable systems. Affirmative answer is required to be eligible for Social Engineering endorsement

During the last three years, has the organization suffered loss of business income as a result of unscheduled system downtime?

Do you enforce Multi-Factor Authentication (MFA) for all employees, contractors, and partners?

At least 1 is required if mfaAuthentication is true

At least 1 is required if mfaAuthentication is true

At least 1 is required if mfaAuthentication is true

At least 1 is required if mfaAuthentication is true

Had any past Cyber Incidents (Required to be true if claimHistory is answered with value greater than 0)

Is there currently any pending litigation, administrative proceeding or claim against the named applicant, organization and/or any of the prospective insureds?

Only applicable if quote is renewal

During the last three years, has the organization suffered a security breach requiring customer or third-party notification according to state or federal regulations?

Has the organization tested a full failover of the most critical servers?

Do agreements with third-party service providers require levels of security commensurate with the organization’s information security standard?

Does the policyholder have sensitive information stored on the cloud?

Does the policyholder encrypt all emails, mobile and computing devices containing sensitive information (e.g., PII, PHI, PCI) sent to external parties?