BIZOPS-21 Cyber Insurance

What is BIZOPS-21 Cyber Insurance Control?

The BIZOPS-21 Cyber insurance control talks about protecting your organization in the event of a data breach or other impact that negatively affects it.

There is no formal amount that is required other than proof of a policy. Each organization must contact insurance companies and provide the necessary information. A premium will be established based on the provided documents.

Available tools in the marketplace

Tools

No tool recommendation is made for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version.

• Cyber insurance list of companies

Control implementation

To implement this control,

• Shop for a cyber insurance policy.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide the most recent cyber insurance certificate showing the coverage.

Evidence example

For the suggested action, an example is provided below:

1. Provide the most recent cyber insurance certificate showing the coverage.
   The following screenshot shows TrustCloud’s cyber insurance example, showing the insurer’s name, the coverage details, and the coverage period.