Know what can be read of a client from outside, before the renewal meeting.
An insurer can read an applicant's domain from outside before it quotes. We do not see any insurer's own check. We read what anyone can see, from public records about the firm only, and hand you an outside reading you can put in front of the client.
An outside reading per firm you introduce. No person checked without their consent.
Three reporting deadlines an insurance brokerage should know.
Notify the FTC of a notification event involving 500 or more customers.
Notify affected residents when certain personal information is breached. Timing and content differ.
Report a breach that creates a real risk of significant harm to the Privacy Commissioner, and tell the people affected.
Notify the Commission d'accès à l'information and the people concerned of an incident that risks serious injury, and keep a register of every confidentiality incident.
A summary of published rules, not legal advice. The Rules and Insurance Briefing names the rules that apply to the firm.
Email authentication, multi-factor sign-in and backups come up on most cyber applications.
A dated record of what was open, and what was closed, reads better than a questionnaire.
A dated baseline of what was open outside, on the day.
We do not contact an applicant unless you introduce us.
The full outside watch, the proof for every finding, and the fix.
Public records about the firm only: its domain, mail rules, lookalike domains and what its website advertises.
The full outside watch on the firm, the proof for every finding, and the fix. Its own decision with us.
Written for the firm, step by step. Forged email closes where we can reach the DNS host, one click per step.
No person is checked by name, and no staff address is checked, until the firm agrees.
One download for your broker or insurer: your Assessment Record, the Rules and Insurance Briefing, and every fix confirmed closed from outside, each with its date.
The assessment includes your first month of monitoring: the watch starts the day the assessment is released, and nothing renews on its own.