Check cyber insurance readiness
check_cyber_insurance_readinessRead-onlyIdempotent
Score how ready a small business is for a cyber insurance application, from 12 yes/partly/no/unsure answers about MFA, EDR, updates, backups, training, payment call-backs, and incident planning. Returns a 0-100 readiness score, a band, and a prioritized list of gaps with fixes. Same scoring as https://wizcomltd.com/tools/cyber-insurance-readiness. Educational only: not insurance or legal advice, and Wizcom is not an insurance agency.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| edr | Yes | Does every computer and server have modern security software that watches for attacks and alerts someone? | |
| eol | Yes | Is everything still supported by its maker, with no old computers or software that no longer get security fixes? | |
| irp | Yes | Do you have a written plan for what to do if you're hacked, including who to call? | |
| patch | Yes | Do computers, software, and network equipment get security updates automatically or on a regular schedule? | |
| backup | Yes | Do you have a backup copy that hackers couldn't reach or delete, such as one kept offline or locked in the cloud? | |
| restore | Yes | Have you actually restored files from your backup in the past year to prove it works? | |
| payments | Yes | Before sending a wire or changing someone's bank details, do you call them at a phone number you already have? Use "na" if not applicable. | |
| training | Yes | Does your team get cybersecurity training at least once a year, including practice phishing emails? | |
| email_sec | Yes | Does your email system screen out scam and phishing emails before they reach people? | |
| mfa_admin | Yes | Do your admin accounts, the ones that can add users or change settings, also need the second step? | |
| mfa_email | Yes | Does everyone need a second step, like a code or a tap on their phone, to log in to work email? | |
| mfa_remote | Yes | When anyone logs in to your systems from outside the office, is that second step required? Use "na" if nobody logs in remotely. |