3 | Cyber Risk Insurance
If you are in any doubt as to whether any information is something that should be disclosed to RSA please contact Your Insurance Adviser
immediately. The following business activities are not eligible for the Cyber Risk Quick Quote. Please complete the Cyber Risk Proposal form and
submit to RSA.
Your business activities do NOT include any of the following;
• Airlines & Air Traffic Conrol
• Critical National Infrastructure (CNI)
(Critical National Infrastructure - Defined as Power Generation & Distribution, Water Supply & treatment, Sewage treatment.)
• Education
• Financial Institutions/Financial Services/Accountants/Law Firms
• Healthcare
• Internet Service Providers & Cloud Service Providers
• TV & Broadcasting, Newspaper and other publications
If you are in any doubt as to whether any information is something that should be disclosed to RSA please contact Your Insurance Adviser
immediately.
Please Tick – This
statement is TRUE
Please Tick – Additional
Information provided
1. Your Company is domiciled in the UK and has no assets, subsidiaries or operations
outside of the United Kingdom.
2. No more than 25% of your turnover is derived from the USA.
3. The annual income, turnover or annual revenue of Your Company in the last
12 months is LESS than £50M.
4. You have NOT been declared bankrupt or insolvent or been the subject of
bankruptcy proceedings in the previous 6 years.
5. In the last financial year You have had a positive net worth and You have made a
profit before tax.
6. You process, transmit or store LESS than 1,000,000 financial transactions
(Credit card payments) per year.
7. You process, transmit or store LESS than 1,000,000 records containing an
individual’s personal information per year.
8. You operate commercially licenced and purchased firewalls to prevent, detect and
monitor intrusions across Your network.
9. You operate commercially licenced and purchased anti-virus software across Your
network.
10. You encrypt all mobile devices, including laptops, tablets, smartphones and memory
sticks.
11. Your Company is GDPR compliant.
12. All personal identifiable information is adequately protected in compliance with the
GDPR.
13.
You back up Your Critical business systems operating systems, programs and data
on a regular basis.
14. You maintain at least one copy (back up) isolated from your main computer system
with restricted access to authorised personnel only.
15. Please confirm You regularly apply patches and updates in accordance with the
suppliers’ recommendations and always apply critical system patches immediately.
Cyber Essentials is a Government-backed and industry supported scheme to guide businesses in protecting themselves against cyber threats.
Cyber Essentials documents are FREE to download and any organisation can use the guidance to implement essential security controls. Details
can be found on the https://www.ncsc.gov.uk/cyberaware/home