Working checklist
Prepare security controls, data exposure, vendors, and incident-response information before comparing cyber quotes.
| Area | What to record | Done |
|---|---|---|
| Data | Customer, employee, payment, health, credential or confidential business data | ☐ |
| Systems | Cloud services, endpoints, email, remote access, backups, critical vendors | ☐ |
| Controls | MFA, backups, patching, endpoint protection, training, privileged access | ☐ |
| Revenue dependence | How long the business can operate without key systems | ☐ |
| Third parties | MSPs, payment processors, hosting, software vendors and contractual obligations | ☐ |
| Prior events | Claims, ransomware, phishing, funds-transfer or privacy incidents | ☐ |
| Coverage wording | Incident response, business interruption, social engineering, cyber crime, regulatory, third-party liability | ☐ |
Use the checklist with current documents
A checklist is useful only when the entries can be tied back to current business records. Keep the relevant application, quote, policy, endorsement, contract, invoice, log, or claim document beside the worksheet.
- Date the worksheet and update it when the business changes.
- Do not copy last year’s payroll, revenue, vehicle, property, or contract details without checking them.
- Mark unanswered items for a licensed insurance professional or official state resource.
- Keep a clean PDF or printed copy with the business insurance file.
Questions to resolve before relying on the result
The checklist does not determine whether coverage exists. Use it to identify mismatches between the business operation and the documents being reviewed.
- Which fact on the worksheet is most likely to change underwriting?
- Which contract requirement needs an actual endorsement rather than a certificate note?
- Which value, limit, payroll, vehicle, or location needs supporting documentation?
- Which state-specific requirement needs verification with an official agency?
Related reading
Sources and verification
Use official and primary sources to verify current rules, insurer licensing, policy wording, and state requirements. The declarations page, forms, endorsements, and signed contracts control the actual insurance relationship.