Technical Minimum Requirements
As cyber threats escalate, insurers have raised the bar on the security controls a business must have before it can buy cover. This course works through those technical minimum requirements: what each control is, the threat it is there to stop, and how to use them to assess whether an insured is actually policy-ready.
Judge whether an insured is policy-ready
The controls that decide whether a risk is written at all, and often what it costs - explained control by control, each tied to the threat it answers.
- Define Zero Trust and apply Zero Trust models to a risk.
- List the common technical minimum requirements insurers now expect.
- Explain how each requirement resolves a specific cyber threat.
- Apply that understanding to assess the policy-readiness of an insured.
What the course covers
Seven self-paced lessons, about three hours in total. A final assessment, earns the certificate of completion.
01 Why insurers set a floor
How rising loss experience turned security controls into a condition of cover.
02 Zero Trust
What the term actually means, and how a Zero Trust model applies to a risk you are assessing.
03 The common minimum requirements
The control set insurers now expect to see, named and defined.
04 Each control and the threat it answers
Why each requirement exists, and the specific attack it is there to stop.
05 Reading the evidence
Telling a control that is genuinely in place from one that is only claimed on a proposal form.
06 Assessing policy-readiness
Putting it together into a view on whether an insured qualifies, and on what terms.
07 Requirements and premium
How meeting the bar affects approval and pricing.
For anyone who has to say yes or no to a risk
Written for insurance professionals rather than engineers. It explains the technology only as far as you need it to make a decision about cover.
Underwriters
You decide whether a risk clears the bar, and what it costs if it only just does.
Brokers
You need to prepare a client for what insurers will require before you go to market.
Risk managers
You are closing the gaps between your current controls and what your insurer expects.
About this certificate course
No. This is a certificate course, which is shorter than a certification. You earn a certificate of completion, not a certification credential.
No. Each control is explained in plain terms and always tied back to the threat it answers and the underwriting decision it affects.
No. It is a one-off purchase, with no renewal and no maintenance fee, and your certificate of completion does not expire.
Yes. The course carries 1.5 CIA CE credits, which count toward the CE requirement at the three-year checkpoint on a CIA certification.
The controls that decide whether a risk is written
About three hours on the technical minimum requirements and how to assess them. A certificate course, worth 1.5 CIA CE credits.