Get ready for your cyber insurance renewal
The renewal form asks about MFA, backups, admin accounts and your incident plan. QoBot answers from your evidence, tells you which answers would be risky today, and plans the fixes before the renewal date.
Northwind Logistics' renewal form has 48 questions. 41 are answered from your files. Two answers would be “no” today and can change before the 1 December renewal:
- Julien (IT provider): turn on MFA for the 3 admin accounts · guide ready · ~30 minYour turn
- Marie (office manager): run a test restore of the accounting folder · checklist ready · ~20 minYour turn
- You: review the answers before they go to your broker · ~15 minNeeds you
Preparing the renewal: who does what
What QoBot does
- Reads the insurer's form and answers from your workspace, with the basis for each answer.
- Challenges answers that sound too good, like “Microsoft keeps our backups”.
- Lists the controls that would change a “no” before the renewal date, with effort and owner.
- Keeps the evidence list ready for the broker or the insurer.
- After an incident, lays out the insurer's steps next to the legal clocks.
What your team does
- Confirm the facts and approve each answer before it goes out.
- Have the fixes applied, with your IT provider if you have one.
- Send the form to your broker or insurer, and read your policy's conditions.
Your application is a declaration
An insurance application is not a marketing questionnaire. You declare facts the insurer relies on to set your cover and price. If an answer turns out to be false after an incident, the insurer may dispute the claim. Your broker and your policy say how much is at stake; QoBot’s rule is simple: no “yes” without evidence or a recorded statement from you.
What insurers usually ask
Forms differ, and they change from one renewal to the next. The same topics keep coming back:
- MFA on email, remote access and administrator accounts.
- Backups: kept separate from your main systems and your provider, and a restore tested recently.
- Admin accounts: few, named, separate from everyday accounts.
- Endpoint protection and how fast security updates are applied.
- Email: phishing training, a call-back rule before changing bank details.
- An incident response plan: who does what in the first hour, who to call.
How QoBot prepares the renewal
- Reads the form and drafts every answer from your workspace, with its basis: a document, your statement, or a gap.
- Probes the answers that sound too good. “When was a restore last tested?” settles more than a confident yes.
- Ranks the fixes that would turn a “no” into a “yes” before the renewal date, with the effort, the owner and an indicative cost marked as an estimate.
- Keeps the proof ready: MFA reports, backup test records, the incident plan.
After an incident
The insurer’s clock runs next to the legal ones. Read the declaration conditions of your policy: they often name a hotline, approved responders and a deadline. In France, a payout for losses from a cyberattack requires a police complaint filed within 72 hours of becoming aware of the attack. QoBot keeps these clocks on one page and drafts what each recipient needs; you make the calls.
FAQ
“Microsoft keeps our backups.” Isn't that enough?
Usually not for an insurer. Microsoft 365's retention features are not a backup you control, and many forms ask about backups kept separate from the provider and restores you've tested. QoBot checks what you have and says so plainly.
Can QoBot lower our premium?
QoBot can't promise that: pricing is the insurer's decision. It helps you put the controls insurers ask about in place and answer accurately, which is what the form measures.
Does QoBot talk to our broker or insurer?
No. QoBot drafts and explains; you send. Nothing leaves your computer without your approval.
What if we have an incident?
Follow your policy's declaration steps, often a hotline and a deadline. In France, to be compensated for losses from a cyberattack, you must file a police complaint within 72 hours of becoming aware of it. See security incidents.
Sources
- French Insurance Code, article L12-10-1Légifrance · police complaint within 72 hours for a cyberattack payout (France)Official text
- 17CyberFrench national help service for victims of cyberattacksOfficial page
This page explains the rules in plain words. It isn't legal advice: for a borderline case, ask a lawyer. Report an error