What insurers are asking
Research for the UK government found that 65% of SMEs with cyber insurance had to meet specific security requirements to get cover, and half of those spent between £5,000 and £25,000 doing so.[1] The same research found SMEs struggled to assess whether their outsourced IT met insurers' technical requirements, and that only 48% said their insurer helped them meet them.[1]
Endpoint protection and multi-factor authentication were among the measures SMEs put in place to qualify.[1] Requirements vary by insurer and change at renewal, so always check your own policy wording.
Questions Falcon helps you answer
| Typical question | With Falcon |
|---|---|
| Do you have endpoint detection and response (EDR) on all devices? | Yes, on every plan, and the console shows which devices are covered |
| Is it monitored 24/7? | Complete: yes, by CrowdStrike's MDR team. Defend Plus: CrowdStrike threat hunting 24/7, alerts to you |
| Who would respond to an incident? | Complete: CrowdStrike's team. Other plans: you or your IT provider |
| Can you isolate an infected device? | Yes, from the console, on every plan |
Upload the questionnaire
If you have an insurance proposal form or renewal questionnaire, upload it from your control panel. We will tell you which questions Falcon covers, which it does not, and what else you might need, such as MFA or backups. We will not tell you to tick a box you cannot honestly tick.
Worth knowing: UK organisations with turnover under £20 million that certify to Cyber Essentials across the whole organisation can opt in to free cyber liability cover with the certificate.[2] See Cyber Essentials.
- DSIT and Grant Thornton, Insuring Resilience: the state of SME cyber insurance (2025). assets.publishing.service.gov.uk
- IASME, Cyber Essentials cyber liability insurance. iasme.co.uk