Cyber insurance application · Passwords and leavers

How do I answer the cyber insurance questions about passwords and staff who leave?

One form asks whether password rules are enforced and whether access is removed when someone leaves.

Last read from the sources at the foot of this page.

Check my firm
01

What exactly does the form ask?

These are the form's own words, with the page they come from.

Enforced password complexity requirements

Procedures in place to terminate user access rights as part of the employee exit process

02

What does it mean for a small firm?

Enforced means the system refuses a weak password, not that staff are asked to choose a good one. Leavers include contractors and outside support staff.

03

How do I answer it truthfully?

Check the password setting in your mail service and your other systems. Compare the list of active accounts with the list of current staff; an account for someone who has left means the honest answer is No.

04

What can an outside reading show, and what can it not?

An outside reading can see which addresses at your domain are listed in breach data from other services. A listed address is one whose password may be known to strangers.

It can show a listed address that belongs to someone who has left. It cannot see whether that account is closed.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy