Cyber Insurance

Supplementary questions

These optional supplementary questions help us to obtain a more complete picture of your company and the security controls you have in place. By completing these questions, you may be eligible for a discount on your quote. In some circumstances, we may require that you answer these supplementary questions before we can issue a quote.

Revenue analysis

Please complete the answers to the questions below. Where you do not have the exact information available please provide the closest approximation and indicate that you have taken this approach.

Please provide the following details for your top 5 clients:

Client name:	Primary Services:	Annual Revenue:

IT resourcing and infrastructure

What was your approximate operational expenditure on IT security in the last financial year (including salaries, annual licenses, consultancy costs, etc.):*

What was your approximate capital expenditure on IT security in the last financial year (including hardware, one off software costs, etc.):*

Do you anticipate spending more, the same or less in this financial year?*

Is your IT infrastructure primarily operated and managed in-house or outsourced?*

How many full-time employees do you have in your IT department?*

How many of these employees are dedicated to a role in IT security?*

Information security governance

Who is responsible for IT security within your organisation (by job title)?*

How many years have they been in this position within your company?*

Please describe the type, nature and volume of the data stored on your network:*

Please describe your data retention policy:*

Do you comply with any internationally recognized standards for information governance (if yes, which ones):*

Cyber security controls

If your organization uses Remote Desktop Protocol (RDP) to allow remote access to your network, please describe the measures you adopt to secure it:*

Please describe your process for patching all operating systems and applications:*

How often do you conduct vulnerability scanning of your network perimeter?*

How often do you conduct penetration testing of you network architecture?*

Please provide details of the third party providers you use to conduct penetration testing:*

Please tick all the boxes below that relate to controls that you currently have implemented within your IT infrastructure (including where provided by a third party). If you’re unsure of what any of these tools are, please refer to the explanations on the final page of this document.*

Please provide the name of the software or service provider that you use for each of the controls highlighted above:*

Important notice

By signing this form you agree that the information provided is both accurate and complete and that you have made all reasonable attempts to ensure this is the case by asking the appropriate people within your business. CFC Underwriting will use this information solely for the purposes of providing insurance services and may share your data with third parties in order to do this. We may also use anonymized elements of your data for the analysis of industry trends and to provide benchmarking data. For full details on our privacy policy please visit https://www.mangoinsurance.ca/

Contact name:*

Position:*

Date Established (DD/MM/YYYY):*

CAPTCHA

Cyber Insurance

Step 1 of 2

Free risk management services included with every policy

Basic company details

Primary contact details

Basic risk questions

Previous cyber incidents