Renewal season exposes the evidence gap.
Take a short check to see which common cyber insurance readiness topics have supporting documentation and which still need attention.
Cyber insurance questionnaires often ask about MFA, backups, employee training, access, vendors, incident response, and sensitive data handling. Many small businesses have answers. The harder part is gathering the supporting documentation when renewal pressure hits.
A picture of what good looks like.
The evidence readiness score surfaces the spots where written rules and review cadence make the biggest difference. The check asks ten short questions across the topics below.
- MFA evidence
- Backup evidence
- Training records
- Device inventory
- Admin access review
- Vendor list
- Incident response plan
- AI usage policy
- Security contact
- Review cadence
- MFA on email and admin tools
Screenshots from Google Workspace, last captured Q2.
DocumentedC-021 - Backup restore test record
Quarterly test log + restore checklist.
In reviewC-034 - Employee security training records
Phishing 101 acknowledgments, all employees.
DocumentedC-008 - Vendor list with data access
Vendors and the data each one can read or write.
Needs attentionC-046 - Incident response contact plan
One-page contact tree, posted in shared drive.
DocumentedC-052 - Admin access review
Quarterly admin list, last review pending.
In reviewC-014 - AI usage policy
Approved tools, prohibited data, review cadence.
DocumentedC-061 - Security contact
Named owner for renewal-season questions.
DocumentedC-003
Start the Cyber Insurance Evidence Gap Study.
Ten short questions. About three minutes. Your score and a recommended next action land at the end.
How we measure this.
How we measure this
Ten self-reported questions across the topics insurers and brokers most often ask about. Each answer maps to a 0 to 3 weight and the result is normalized to a score out of one hundred.
What your score means
Your Evidence Readiness Score is an educational signal showing which evidence categories are most likely to need attention before renewal. Higher scores indicate organized supporting documentation; lower scores indicate categories where evidence is missing or hard to find.
What this does not claim
Not an insurance approval. Not a determination of eligibility. Not legal or insurance advice. Carriers make their own coverage and pricing decisions. Index8 Research is educational support for the readiness conversation, not the conversation itself.
How aggregated trends may support future research
Anonymized and aggregated responses may inform future Renewal Readiness benchmarks. Individual responses are never published. Sample-size and methodology gates are documented in docs/research/future-benchmark-plan.md.
Early Index8 Research resources are field studies and educational tools. As response volume grows, Index8 may publish aggregate trends and annual benchmarks. Sample-size and methodology gates are documented before any public claim.