Cybersecurity
Customer security coverage review
Check the customer's security controls, identity configuration and available logs. Document gaps that would make an incident harder to detect or explain.
Questions the review addresses
- Are we actually covered?
- Which controls and records does our insurance carrier require?
- Could we explain this to leadership?
- What would happen if we had a business email compromise, ransomware event, or identity compromise?