Cyber Insurance Compliance Requirements for IT

Cyber insurance carriers now treat a short list of security controls as the price of admission: multi-factor authentication on everything (email, remote access, VPN, and administrator accounts), endpoint detection and response on every machine, backups that are offline or immutable and have been test-restored, email filtering, security awareness training, a documented patching cadence, and separated…