Prepare for a useful cyber insurance conversation
Turn security facts and unknowns into a broker discussion packet.
Content and source check: October 1, 2026 · Operational suggestions
Start with the actual application
Record its name and version, the entities and services covered, the responsible reviewer and your renewal or target date. You can begin without choosing an insurer. Never treat our topic list as the insurer's application.
Keep answers separate from evidence
Use each topic to collect a current evidence reference and date. Optionally map it to an actual application question and draft an answer. Unknown means unknown; planned work is not an implemented safeguard.
Make the open work useful
Give each unknown, gap or partial response a specific next action. A firm reviewer can review preparation with documented open questions. An addressed topic needs a dated evidence reference before requesting firm review; this is a product workflow rule, not an underwriting requirement.
Review the packet with your broker
Download the text, CSV or PDF packet. It includes unanswered topics and proposed answers as well as completed work. Use an approved sharing channel; this product does not contact a broker, insurer or claims service. Confirm policy-specific terms and submission authority outside the tool.
Return without starting over
Download the editable JSON or explicitly save to a free account. Enabling program management uses the same saved records to assign follow-up, review evidence and preserve the preparation review. That approval is not an insurance application signature or evidence that coverage exists.
Source & applicability
FTC-INSURANCE — Cyber Insurance — Cybersecurity for Small Business
Background for discussing coverage categories, third-party exposure and response services with an insurance professional. General small-business education developed with NAIC. It is not an insurer's application, policy wording or an RIA-specific underwriting standard.
SEC-registered and state-registered firms may have different obligations. Have the appropriate professionals review what applies to your firm. No regulatory determination is made here.