BIZOPS-21 Cyber Insurance

What is this control about?

Cyber insurance protects your organization in the event of a data breach or other impact that negatively affects the company.

There is no formal amount that is required other than the proof of a cyber insurance policy. Each organization must contact insurance companies and provide the necessary information. A premium will be established based on the provided documents.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• Cyber insurance list of companies

Control implementation

Shop for a cyber insurance policy

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide the most recent cyber insurance certificate showing the coverage

Evidence example

From the suggested action above, an example is provided below.

1. Provide the most recent cyber insurance certificate showing the coverage.

TrustCloud cyber security example demonstrates the insurer’s name, the coverage details and the coverage period