Which vendors do I list on a cyber insurance form?

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

List your top three (3) most critical vendors that provide services, including IT Services such as SaaS or Cloud or web services.

For vendors with access to the Applicant's computer system or confidential information, indicate whether the Applicant has the following in place:

please list your critical third party technology providers below (up to a maximum of 10)

What does it mean for a small firm?

A critical vendor is one you could not work without for a day: your mail service, your practice or accounting system, the company that supports your computers.

How do I answer it truthfully?

Ask which outage would stop billing or client work, and list those companies. One form also asks whether you review and remove vendor access; answer from what you do.

What can an outside reading show, and what can it not?

Your MX records are public. They show which service receives your mail, and whether it passes through a separate filtering service first.

Your DNS records also show who hosts your DNS and your website.

It cannot see the software you use inside the firm or who can reach it.

Which questions sit next to this one?

• Websites and domains
• MFA on remote access