What happens if an answer on my cyber insurance application turns out to be wrong?

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

If anything in these statements is not correct, CFC Underwriting will be entitled to treat this insurance as if it had never existed.

if in the time between submission of this application and the requested date for coverage to be effective, the Applicant becomes aware of any information which would change the answers furnished in response to any question of this application, such information shall be revealed immediately in writing to the Underwriter.

You may use the space under the heading "Additional Disclosures & Clarifications" to clarify any answers that may be incomplete or require additional detail.

the Insurer may elect to obtain requested information from public sources, including the Internet.

What does it mean for a small firm?

A Yes you cannot back up is a risk to any claim you make later. A No with a note on what is in place and when the rest will be is a true answer.

How do I answer it truthfully?

Answer from evidence: a settings screen, a dated record, a list. Where the honest answer is partial, use the space the form gives for comments. If something changes before cover starts, tell the insurer in writing.

What can an outside reading check for this question?

Some answers can be checked from outside by anyone, an insurer included. One form says the insurer may use public sources.

Your DMARC and SPF records are public. Anyone can read whether mail servers are told to refuse mail forged in your domain's name.

An outside reading can see whether a remote desktop port, a file sharing port, or a VPN or other remote-access login page answers from the internet on your domain and its host names.

Check those before you sign. MFA, backups and training cannot be seen from outside.

Which questions sit next to this one?

• DMARC
• Remote access allowed
• Known circumstances