Struggling to get cyber insurance approved? We help you become insurable
Getting a cyber insurance quote should be straightforward.
But for many businesses, it turns into a long list of technical questions about MFA, backups, endpoint protection, patching, email security and monitoring.
And then it goes further.
Insurers now ask about your data, your clients, your suppliers, your processes and even how your team handles payments.
That’s where most businesses get stuck.
Black Swan Cyber Security helps organisations in Chesterfield, Sheffield and across Derbyshire understand what insurers are really asking – and how to answer with confidence.
What insurers are really assessing
Cyber insurance applications do not just look at your antivirus or backups. Insurers increasingly assess how well your business prevents attacks, reduces human error, protects sensitive data and manages wider business risk.
Technical risk
MFA, endpoint protection, patching, email security, backups, monitoring and control over unsupported systems.
Human risk
Phishing awareness, admin rights, payment verification processes and how easily staff could be tricked.
Data risk
How much personal or sensitive data you hold, how it is protected, and whether old records are being cleared down.
Business risk
Previous incidents, key clients, outsourced providers and how exposed your business would be if systems went down.
Why businesses get stuck (even with “good IT”)
Most businesses we speak to aren’t doing nothing.
They’ve got:
- IT support
- antivirus
- Microsoft 365
- backups
But when the insurance questions come in, things start to break down:
- MFA isn’t enforced everywhere
- Not all devices are protected
- Backups exist but haven’t been tested
- Staff still have admin rights
- No one is sure how quickly systems are patched
- Data is stored but never reviewed or reduced
And then there are the questions no one expects:
- “How many individuals’ data do you hold?”
- “What percentage of endpoints are unprotected?”
- “How do you verify payment requests?”
That’s where applications stall.
Our cyber insurance readiness review
This is designed to help you understand where you stand, before you apply, renew or answer difficult questions.
What we assess
Security controls
- MFA coverage
- Endpoint protection and monitoring
- Email security
- Patch management
- Backup design and testing
People and process
- Access control and admin rights
- Staff awareness
- Payment verification procedures
Data exposure
- What data you hold
- Where it is stored
- How long it is retained
- Whether it is protected properly
Business risk factors
- Client dependency
- Third-party suppliers
- Incident history
- General risk profile
What you get
- Clear gap analysis (no jargon)
- Prioritised action plan
- Practical recommendations
- Support aligning with insurer expectations
- Optional help implementing fixes
These are the kinds of things you’ll be expected to answer
How insurance-ready are you?
If you cannot confidently answer these questions, your application or renewal may need work before you go any further.
- MFA enabled for all email accounts
- MFA enabled for remote access
- EDR deployed on all endpoints
- No unsupported or end-of-life software
- Critical patches applied promptly
- Backups secured away from the live environment
- Full restores tested regularly
- Phishing awareness training in place
- Payment change checks built into your process
- Admin rights restricted to the right people
- Incident response plan documented
- Clear idea of what personal data you hold
Local support for businesses in Chesterfield, Sheffield and Derbyshire
You don’t need a generic checklist downloaded from the internet.
You need someone who can look at your setup, explain what matters and help you fix it properly.
Black Swan is based in Chesterfield and supports businesses across:
- Chesterfield Town Centre
- Dronfield and Eckington
- Staveley and Markham Vale
- Sheffield and surrounding areas
- North East Derbyshire
We work with organisations that want practical advice, not guesswork.
Cyber security vs cyber insurance (why you need both)
Cyber security helps reduce the likelihood of an attack.
Cyber insurance helps reduce the financial impact if one happens.
But one does not replace the other.
In fact, insurers now expect a baseline level of security before they offer meaningful cover.
That’s why many businesses are now focusing on:
- improving security
- reducing risk exposure
- proving controls are in place
Not just buying a policy and hoping for the best.
Sound familiar?
- “We’ve been told we need cyber insurance but don’t know where to start”
- “Our broker sent over a form full of technical questions”
- “We have IT support but aren’t sure if we meet insurer requirements”
- “We’re worried about exclusions or being caught out later”
- “We want cover but don’t want to overpay”
Get a clearer route to cyber insurance readiness
If you’re applying for cyber insurance, renewing a policy, or trying to make sense of the questions being asked, we’ll help you get clarity.
No jargon. No scare tactics. Just practical guidance based on what insurers are actually looking for.
Speak to Black Swan
What insurers are really looking for
Most declined cyber insurance applications come down to a few missing controls. Insurers now expect to see real protection in place, not just policies. These pages show how to close the gaps and improve your chances of approval.
CFC Cyber Insurance Requirements Explained
Understand what insurers actually ask for, including MFA, endpoint protection, backups and monitoring.
CertificationCyber Essentials Security Package
A recognised baseline that helps demonstrate your security posture and improve approval chances.
Email SecurityMicrosoft 365 Email Protection
Block phishing and account compromise, one of the most common causes of failed applications.
BackupMicrosoft 365 Cloud Backup
Protect email, OneDrive and SharePoint data and prove recoverability to insurers.
IdentityIdentity Threat Detection & Response
Detect suspicious logins and prove visibility over account activity.
Endpoint DetectionHuntress Managed EDR
24/7 monitoring, threat detection and response on devices to stop attacks before they spread.
Backup & RecoveryAxcient Server & Endpoint Backup
Fast recovery for servers and devices, helping you restore systems quickly if something goes wrong
24/7 MonitoringSecurity Operations & Response (MXDR)
Continuous monitoring and response, showing insurers that threats are actively handled, not just detected.
Backed by the world's leading cyber defenders






















Meet Kevin: Founder & lead security consultant
Kevin has spent over 20 years solving real-world IT and cyber security challenges for organisations like yours. His approach is refreshingly straightforward: listen first, understand your constraints, then build security that actually works within your budget and compliance requirements.
Beyond technical expertise, Kevin brings a deep understanding of how organisations really operate, gained through years serving as a Parish Councillor, school governor, and charity trustee. He knows what it’s like to balance competing priorities, stretch budgets, and maintain public trust.
Whether you’re dealing with a security incident or simply want an honest assessment of your current protection, Kevin provides clear guidance without the sales pitch.
Ready to discuss your security needs?
Contact Kevin directly – no lengthy sales process, just practical advice from someone who genuinely wants to help.


Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.