Which websites and domains do I list on a cyber insurance form?

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

List all websites and domains owned by you, or operated by/for you, including any other entities for which coverage is sought under the policy:

the Insurer may elect to obtain requested information from public sources, including the Internet.

What does it mean for a small firm?

Other questions on the same form depend on this list, such as whether every VPN login page sits on these domains. Another form says the insurer may look up information in public sources.

How do I answer it truthfully?

Pull the list from the account where you register domains, not from memory. Add domains held by any affiliate on the policy and any domain your mail still uses.

What can an outside reading check for this question?

Host names issued a certificate for your domain are in public certificate logs, so an outside reading can find host names you had forgotten.

An outside reading can see registered domain names that differ from yours by a letter or two, the names used to send a forged invoice or a change of bank details.

Those look-alikes are not yours and do not go on the list.

Which questions sit next to this one?

• VPN login pages
• A wrong answer
• Encryption