Skip to content

Article

What your proposal form really warrants

How underwriters read each answer, and where good-faith answers go wrong.

Published

The proposal form looks like a questionnaire. Legally, it is the foundation of the contract. Every answer is a statement the insurer relies on when it prices the risk and decides to write the policy, and many policies turn some of those answers into warranties or conditions that must stay true for the whole policy period.

Questions written by underwriters, answered by everyone else

"Is multi-factor authentication enforced for all remote access?" A CFO filling in the form hears a simple question, and the IT manager confirms that MFA is in place. The underwriter, however, means all remote access: VPN, cloud consoles, email, remote desktop, and the service accounts used by outside vendors. One unprotected path is enough to make the answer untrue.

The same pattern repeats across the form:

  • Backups: "offline" or "immutable" has a technical meaning. A backup the attacker can reach with the same domain credentials is neither.
  • Endpoint protection: "EDR on all endpoints" includes servers, and usually requires 24/7 monitoring of the alerts.
  • Patching: a stated patch window has to be one you can show from your own records.

Where good faith stops protecting you

After a ransomware event, the insurer's forensic team reconstructs your environment as it was on the day of the attack. If a declared control was missing, the insurer may argue Material Misrepresentation: that it would not have written the policy, or not on those terms, had it known. Good faith helps, but it does not cure an answer that was objectively untrue.

What to do before you sign

  1. Read every question the way an underwriter would, with its full scope.
  2. Check each answer against evidence you can produce: configuration exports, reports, contracts.
  3. Where the honest answer is "partly", say so, and describe the compensating control.
  4. Keep the verification under privilege, so the gaps you find and fix are not handed to the other side later.

A proposal form answered this way costs a few days before renewal. It is the cheapest insurance you will buy all year.

This article is general information, not legal advice.

All insights
What your proposal form really warrants · CyberSure