Cyber Insurance

Most small businesses meet the Essential Eight for the first time as a question on an insurance form. The renewal lands, and somewhere in the proposal are twenty questions about multi-factor authentication, patching, backups, and administrator access. The answers feel like they should be yes. Whether they actually are is a different matter.

A wrong answer here does not bounce. It sits quietly on the file until a claim is made, and then it becomes the reason the claim is refused. Insurers are entitled to decline for misrepresentation, and "we thought we had that turned on" is not a defence.

This work is about answering those questions accurately, with evidence, before the form is signed. And, where the answers expose gaps, understanding how far off the mark you actually are.

I review your environment against the specific proposal form in front of you, question by question, and give you an answer to each one that is backed by something I have actually seen. Not an assumption, not a hopeful yes. The result is a written record showing, for every question, the answer given and the evidence it rests on, ready for you to confirm and submit.

Fixed price, $750 plus GST. Turnaround measured in days, because renewal deadlines do not wait.

Where a question cannot be answered honestly in your favour, I tell you that plainly rather than dressing it up. That is the point of doing it independently.

The form tells you how you would answer today. An Essential Eight maturity assessment tells you where you actually stand.

Assessed against the ACSC Essential Eight Maturity Model, this is a full review of all eight mitigation strategies at Maturity Level One, delivered as a written report with a sixty-minute walkthrough. You get your current maturity per strategy, the specific gaps holding you back at each level, and a prioritised path to close them. Maturity Level Two by arrangement.

Fixed price, $1,950 plus GST, two-week turnaround.

If you start with the form and decide within sixty days that you want the full assessment, the fee for the form work comes off the assessment price. You do not pay twice for me to look at the same environment.

Where the gap the form exposes is backups, a witnessed restore test turns an assumed yes into evidence. That is the backup and recovery verification.

I verify that the technical answers on your form are accurate. I do not advise you on your insurance. Whether to insure, how much cover to hold, which policy suits you, whether an exclusion matters: those are questions for your broker, and I will not step into them. My job ends at the technical truth of the answers. Your broker's begins there.

The work offered through robswain.au is one-off and self-contained by design. There is no retainer and no ongoing commitment: the engagement ends when the work is done, and you keep control of your own systems throughout.

Send me the form, or just the renewal date, and I will tell you which of the two makes sense to start with. rob@robswain.au