08/27/2026
Business owners, your cyber insurance renewal is coming. Your broker is going to ask you eight questions. You're going to say yes to all of them. Some of those yeses are going to be wrong.
Here's the list so you can check before it matters.
MFA enforced on all remote access and email?
Endpoint detection on every device?
Offsite backups, and when were they last restored?
Inbound email filtered and authenticated?
Annual training for every employee?
24/7 monitoring or managed detection?
How fast is access revoked when someone leaves?
Written, tested incident response plan?
The difference between a yes and a defensible yes is documentation. Your carrier wants receipts, not your word.
Number seven is the one most firms get wrong. Almost everyone answers it confidently.
Law firm cybersecurity requirements: The eight controls every cyber carrier asks law firms about, the one most firms fail.