Engagement 07
Insurance Readiness Review
Know what your underwriter will ask before they ask it.
The situation
Cyber underwriters have added software supply chain questions to the submission, and the answers now move the price. They are not the questions a security team is used to being asked, and they arrive on a form with a deadline rather than in a conversation.
The review that matters happens before the submission, not after the quote. A gap your broker finds is a negotiation. A gap the underwriter finds is a number.
This is you if
- Renewal is inside six months and supply chain questions are new on the form this year.
- Your broker has flagged software supply chain as a pricing factor and nobody owns the answer.
- You would rather find the gap than have it found during underwriting.
How it runs
- Week 1
Map to what is actually asked
Your controls against the supply chain questions appearing on current submissions and renewal forms, rather than against a framework no underwriter reads.
- Week 2
Document and rank
Evidence assembled in the form the submission wants it, and the gaps ranked by how likely each one is to move a premium or jeopardize a renewal.
- Week 2
Scope what fits before the date
A short remediation list sized to land before your renewal rather than sized to be complete.
What you are left holding
- Your controls mapped to what underwriters are actually asking about supply chain risk
- Evidence documented in the form the submission wants it
- The gaps most likely to move a premium or jeopardize a renewal, ranked
- A short remediation list scoped to land before the renewal date
What we need from you
- Your renewal date, and this year's submission form or questionnaire if you have it.
- Your broker's read on what changed this year, where they are willing to share it.
- Access to the control evidence, not only to the policy describing it.
A fixed fee that assumes nothing about access is a guess. This is the list that keeps the price the price.
What this is not
- Not insurance advice and not a coverage recommendation. We place no policies and take no commission from anyone who does.
- Not a guarantee of a premium outcome. Underwriting weighs far more than supply chain, and we speak only to the part we can evidence.
Why people call about this one
Underwriters price what they can see
Insurers increasingly ask for SBOMs and supply chain controls before issuing or renewing, and price vendor risk into the premium. The conversation belongs to the CFO as much as the CISO.
Justified against premium exposure and renewal risk, not against a tooling budget
The shape of it
- Shape
- Two weeks, fixed fee
- Usually funded by
- CFO · Compliance
- Often leads to
- Nothing. This one stands alone.