The carrier reviews your questionnaire, firm size, and industry against their baseline controls. We map your answers to that baseline in S2 and flag gaps before submission so attestations match evidence.
Process FAQ
Insurer process Q&A
Plain-language reference — not legal or insurance advice.
Many policies expect controls to stay in place for the term — not only at application. S5 verifies ongoing MFA, backups, EDR, and related items and produces quarterly attestation records.
You notify the carrier per policy requirements. Adjusters often test whether controls were maintained and answers were accurate. S6 provides timestamped evidence and IR handoff support — we do not negotiate coverage.
Generally no — restoration to pre-loss condition is different from security improvements. S3 remediation is for underwriting readiness before or between renewals, not claim-funded upgrades.
First-party covers your costs (forensics, downtime, notification). Third-party covers claims others bring against you. Coverage map on /cyber-ready/coverage lists common categories — your broker confirms your form.
Brokers place coverage and interpret policy language. We supply evidence packs and readiness memos; we do not bind policies or advise on insurability.
KJ Digital Solutions is a risk-reduction consultancy — not an insurer, broker, or guarantor of coverage, premiums, or claim payouts. The carrier determines coverage; you remain responsible for maintaining controls for the policy term.