Cyber insurance application · Encryption

How do I answer the cyber insurance questions about encryption?

One form asks whether sensitive data is encrypted in five places: at rest, in transit, on mobile devices, on staff owned devices and with a third party.

Last read from the sources at the foot of this page.

Check my firm
01

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

Indicate whether the data indicated in Question 1 is encrypted:

While in transit in electronic form

Please describe your approach towards protecting sensitive and confidential information (e.g., access controls, encryption, network segmentation, etc.):

02

What does it mean for a small firm?

At rest means stored: on a server, a laptop, a phone. In transit means moving: a web page, an email, a file upload.

03

How do I answer it truthfully?

For each place, find the setting that turns encryption on: disk encryption on laptops, encryption on phones, a valid certificate on the website. Answer N/A only where the form offers it and the data is never there.

04

What can an outside reading show, and what can it not?

The certificate on your website is public. Anyone can see whether it is valid and when it ends.

That is the in-transit part for your website. Stored data cannot be seen from outside.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy