Readiline Cyber insurance preparedness checker Pre-application self-assessment
Find out if you'd pass a cyber insurance application before the underwriter does. Carriers now decline or surcharge businesses that are missing a handful of baseline controls. Answer 22 questions to get a readiness rating and a prioritized list of what to fix.
Start the assessment↓
22 questions across 5 control areas
~6 min to complete, no sign-up
0 bytes sent anywhere; answers stay in your browser Organization name (optional, for your report) 01 Identity & access Stolen credentials are the most common way attackers get in.
Is multi-factor authentication enforced on all email accounts? Is MFA required for all remote access to your network? Do administrator and privileged accounts require MFA? Do IT staff use separate accounts for admin work? Is access removed within 24 hours when someone leaves? 02 Endpoints & network Underwriters want to know you can detect and stop an intrusion quickly.
Is endpoint detection and response (EDR) deployed on every laptop and server? Is remote desktop (RDP) blocked from the open internet? Are security alerts monitored around the clock? Are critical security patches applied within 30 days? Is unsupported (end-of-life) software retired or isolated? 03 Data & backups Recoverable backups are what turn a ransomware event into an inconvenience.
Do you keep offline, immutable, or air-gapped backups of critical data? Have you successfully tested a full restore in the last 12 months? Are backup systems protected by separate credentials and MFA? Are laptops and sensitive data encrypted? 04 Email & people Phishing and payment fraud drive a large share of cyber claims.
Do you filter inbound email and publish SPF, DKIM, and DMARC records? Do all staff get security awareness training and phishing simulations? Are payment and bank-detail changes verified by a call-back? 05 Response & governance Carriers look for evidence that someone owns security and has a plan.
Do you have a written incident response plan that has been exercised? Are security logs centrally collected and kept for at least 90 days? Do you keep an up-to-date inventory of hardware, software, and data? Do you assess the security of vendors who access your systems or data? Is a named person accountable for cybersecurity? Readiness score
Keep going
Identity & access 0
Endpoints & network 0
Data & backups 0
Email & people 0
Response & governance 0
Jump to action plan ↓ Readiline report · November 13, 2026
0/100 — Keep going Answer every question to see your readiness rating. 22 questions still unanswered.
Print / save PDF Start over
Your prioritized action plan appears here as you answer.
Readiline is a self-assessment guide, not an underwriting decision or insurance advice. Requirements vary by carrier, policy limit, and industry; confirm with your broker.