Cyber insurance: the controls insurers ask for

What comes up often

• Multi-factor authentication (MFA) on email, VPN and admin access
• Offline or immutable backups, tested
• Regular patching and vulnerability scanning
• Endpoint protection (next-gen antivirus, EDR)
• Training and simulated phishing
• Secure remote access, no exposed RDP
• Incident response plan
• Periodic penetration testing

How Altea helps

We check each item, fix what relates to the network and firewall, and give you evidence (reports, configuration screenshots, test attestation) to answer the questionnaire honestly. This guide is general: requirements vary by insurer and policy.