Clear guidance. Careful arrangements. Support when it matters.

Business insurance

Cyber Insurance Readiness Checklist for SMEs

The basic systems, response planning and information that businesses should review before discussing cyber insurance.

In brief: Cyber insurance is not a substitute for security. A business should understand its systems, data, backups, suppliers and response plan before asking an insurer to assess cyber exposure.

Education onlyWritten by: Reviewed by: Reviewer pending verification

Map the systems that keep trading moving

Identify the software, cloud services, email, payment systems and data that operations depend on. Consider what would happen if a critical system became unavailable.

Test the basics before an incident

Backups, access controls, patching, multi-factor authentication and response responsibilities can affect both resilience and the information relevant to an underwriting discussion.

Understand the first hours after an event

A practical incident plan should identify who escalates, who preserves evidence, which specialists may be needed and how communications are managed. Specific notification duties depend on the policy and event.

A sensible next step

If you are reviewing a quote or existing cover, prepare the schedule and questions for an authorised adviser. Do not submit sensitive information through this first-contact website form.

Request an insurance review

Answer library

Common follow-up questions

Browse the full FAQ
Does having backups remove the need for cyber insurance?

Backups are an important control, but they do not address every cost or liability that can follow an incident. The relevant risk picture depends on the business.

What should an SME prepare for a cyber-insurance discussion?

Prepare a high-level view of systems, data, security controls, backups, suppliers, incident history and operational dependencies. Do not submit sensitive security information through the initial website form.

Get help

Need to discuss the insurance question behind the guide?

Start with a short, secure enquiry. You can tell us what you need help with, how you prefer to be contacted and when to call.

Request a callback