Cyber Insurance Readiness for Small Businesses
Cyber insurance forms now ask detailed questions about MFA, backups, patching, email security, remote access, staff training and incident response. We help small businesses understand what those questions mean, check what is actually in place, fix the gaps and gather useful evidence before renewal, application or broker review.
Before you tick yes on your cyber insurance form, make sure yes is true.
Cyber insurance forms now ask detailed questions about MFA, backups, patching, email security, remote access, staff training and incident response.
We help small businesses understand what those questions mean, check what is actually in place, fix the gaps and gather practical evidence before renewal, application or broker review.
We do not sell cyber insurance. We help you understand and strengthen the cyber controls behind the questions. We can recommend a local broker if required.
If you are not sure whether something is in place, we help you check before you answer.
You get a clearer picture of your MFA, backups, patching, training, email security and managed protection.
The form looks simple. The answers are not always simple.
A yes/no question can hide a lot of detail. MFA might be switched on for email, but not admin accounts. Backups might exist, but never been tested. Anti-virus might be installed, but no one is watching the alerts.
“Do you use MFA?”
Where? For who? For cloud email, remote access, admin portals, backups and privileged accounts? That is where many small businesses get caught out.
“Are your backups recoverable?”
Having a backup is not the same as knowing you can restore from it. We look for practical recovery evidence, not just a green tick in a portal.
“Do you train staff?”
Insurers are increasingly interested in phishing, payment fraud and human risk. A one-off chat in the office rarely gives you much evidence.
Cyber insurance does not stop an attack. It helps after something goes wrong. Our job is to help you reduce the chance of getting there in the first place and prove you took sensible steps before you needed to claim.
The risk is not just getting the answer wrong. It is not knowing what the answer is based on.
Cyber insurance applications and statements of fact are often based on the information you provide. If answers are inaccurate, incomplete or out of date, it may affect the terms offered, the cover available or how a future claim is handled.
“Yes, we have MFA”
But is it enabled for Microsoft 365, remote access, admin accounts and backup portals?
“Yes, we have backups”
But are Microsoft 365 emails and files backed up separately, and has anyone tested a restore recently?
“Yes, we train staff”
But do you have records, phishing simulations or evidence that training is happening regularly?
A clearer way to deal with cyber insurance questions
You do not need to become a cyber security expert. You need a practical check of the controls insurers care about, written in plain English.
Review
We look at the questions from your broker, insurer, client or tender.
Prioritise
We check what is already in place and identify the gaps that matter most.
Fix
We help close the gaps with sensible controls that fit your size, risk and budget.
Evidence
You receive practical proof points to support broker, insurer or client conversations.
Support
We can keep the controls monitored, maintained and ready for the next renewal.
Your Cyber Insurance Readiness Review
Instead of guessing your answers, we help you build a clearer picture of where you stand.
The scorecard gives you a practical view of the cyber controls insurers commonly ask about, the gaps that need attention and the evidence you may need before renewal or application.
Book a Security Review- MFA and identity security status
- Backup and recovery readiness
- Patch management and device protection
- Email security and phishing protection
- Staff training and social engineering controls
- Remote access, firewall and exposed service risks
- Evidence gaps and recommended next steps
Common gaps we see before cyber insurance renewal
Most organisations are not careless. They are busy. The problem is that insurance questions often assume a level of cyber detail that many small businesses have never had explained properly.
MFA is only partly enabled
Email might be protected, but admin accounts, backups, VPNs or remote access tools are still exposed.
Backups are not properly tested
There may be a backup product in place, but no recent restore test or clear recovery process.
Patch management is informal
Updates rely on people noticing prompts rather than a tracked process across key devices and applications.
Email security is too basic
Microsoft 365 alone may not give enough protection against modern phishing, impersonation and account takeover attempts.
No evidence of staff training
People have been “told to be careful”, but there are no records, campaigns or phishing simulations.
Remote access has not been reviewed
Old VPNs, exposed services, weak firewall rules or forgotten remote tools can create unnecessary risk.
The controls behind the tick boxes
We can keep this simple. If something needs fixing, we map it to the right control rather than throwing a bundle of tools at you.
Who this is for
This is built for small businesses that want a practical answer, not a lecture.
This is for you if...
You have been sent a cyber insurance form, your broker has asked technical questions, your renewal is coming up, you have been declined, or a client wants proof before awarding work.
This is not for you if...
You want someone to rubber-stamp answers without checking them, guarantee insurance approval, or give regulated insurance advice. That is not what we do.
Why Black Swan?
Black Swan Cyber Security Solutions is led by Kevin Walker, a Chesterfield-based cyber security specialist with more than 20 years’ experience supporting schools, businesses and organisations where downtime, data loss and compliance problems matter.
We are not an IT company that “also does security”. We focus on managed cyber security, practical evidence and honest advice for small businesses that need to take cyber seriously without overcomplicating it.
Plain English
We explain the questions without hiding behind vendor jargon.
Local support
Based near Chesterfield, supporting businesses across Derbyshire, Sheffield and South Yorkshire.
Cyber-first
Our work is built around cyber risk, compliance and evidence.
Sensible budgets
We help you prioritise what matters most, then build from there.
Related cyber insurance support
Cyber insurance is not one single issue. These pages go deeper into the common routes businesses take.
Cyber insurance questions explained
A plain-English guide to MFA, backups, patching, EDR, phishing training, remote access and fraud controls.
Read moreCyber insurance and staff training
Why insurers may ask about phishing training, staff awareness, social engineering fraud controls and training evidence.
Read moreCyber insurance and backups
Why recovery evidence matters when insurers ask about backups, offline copies, Microsoft 365 data and restore testing.
Read moreStruggling to get cyber insurance approved?
For businesses that have been declined or asked for more information.
Read moreCyber Essentials and cyber insurance
How certification can support your insurance conversations.
Read moreCyber insurance for charities
Support for charities and non-profits dealing with insurance and donor data risk.
Read moreSupport for insurance brokers
A referral route for brokers whose clients are stuck on technical cyber questions.
Read moreCyber insurance readiness FAQs
The questions we are often asked by small businesses, finance teams, office managers and owners.
Do you sell cyber insurance?
No. We do not sell insurance or provide regulated insurance advice. We help you understand and improve the cyber security controls behind the questions your broker, insurer or client may ask.
Can you guarantee we will be accepted for cyber insurance?
No. Acceptance, premiums, terms and claims decisions sit with insurers and brokers. What we can do is help you check your cyber security position, close sensible gaps and keep better evidence.
Can you help if we have already been declined?
Yes. If you have been declined or asked for more information, we can review the technical questions, identify likely gaps and help you create a practical improvement plan.
Is Cyber Essentials enough for cyber insurance?
Cyber Essentials can help, especially where insurers or clients want evidence of basic controls. It is not always the full picture. Insurers may still ask about MFA, backups, recovery testing, staff training, EDR, remote access and social engineering fraud controls.
Can you work with our insurance broker?
Yes. We can help explain the technical side, review the questions and support the cyber security actions. Your broker remains responsible for insurance advice.
What evidence do we get?
That depends on what we review and implement. Typical evidence might include MFA status, backup and restore testing notes, endpoint protection status, patch summaries, awareness training records, phishing campaign summaries and a plain-English readiness summary.
Not sure what you can safely answer?
Send us the cyber insurance questions you have been asked. We will help you understand what they mean, what you already have in place and what needs fixing before you tick the box.
Book a Cyber Insurance Readiness Check
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.