Use the Cyber Insurance scorecard
Start on the Cyber Insurance page when the client only needs a quick directional score before choosing a worksheet, review, or evidence pack.
Open Cyber Insurance scorecardTemplate Guide
How customers use the Cyber Insurance Readiness Snapshot.
Use the snapshot as a guided worksheet before a renewal, first application, broker follow-up, or underwriter question. It helps identify which controls are ready, which need evidence, and which need a remediation owner.
Customer Workflow
Download the Excel worksheet
Use the workbook to fill in scores, evidence status, owners, notes, risk flags, and a plain-language summary with automatic scoring.
Email me the Excel worksheetConfirm evidence owners
For each control, identify who can prove the answer: internal IT, outside IT provider, HR, leadership, finance, operations, or a vendor.
Decide the next action
Use the score, risk flags, and missing evidence list to decide whether to collect proof, fix urgent gaps, or prepare a broker-ready package.
What To Fill
The worksheet is meant to organize evidence, not replace a review.
Prospect context: company profile, renewal deadline, broker or carrier, IT support model, and deadline pressure.
Readiness questions: score each control from 0 to 2, then add evidence status, owner, and notes.
Risk flags: mark items that could block an application, such as unclear extra login verification, missing backup proof, or untested incident response.
Plain-language summary: capture strongest areas, most urgent gaps, evidence to collect first, and recommended next step.
How To Interpret
Evidence is unclear
Start with a triage conversation. The priority is finding what exists, what is missing, and who owns each proof item.
Review recommended
Some controls likely exist, but scope, freshness, or ownership needs review before sharing answers with a broker or carrier.
Package the evidence
Core controls appear stronger. Focus on organizing proof, checking freshness, and preparing a concise broker-ready summary.
FAQ
Common questions about the readiness snapshot.
Is the snapshot the same as a full cyber insurance application?
No. It is a guided worksheet to identify which controls are ready, which need evidence, and which need a remediation owner before a renewal, application, or broker follow-up.
Who should fill out the worksheet?
Whoever owns the underlying evidence, such as IT, an outside IT provider, backups, identity, endpoint protection, and incident response, not one person completing it from memory.
What does a low score mean?
A score in the 0-9 range usually means evidence is unclear rather than controls being absent. The priority is finding what exists, what is missing, and who owns each proof item.
What happens after scoring?
The score, risk flags, and missing evidence list drive the next action: collecting proof, fixing urgent gaps, or preparing a broker-ready package.
Next Step