Cyber insurance & attestation

Answer the insurer with evidence from your own systems, not a best guess.

Your insurer asks about MFA, administrator access, endpoint protection and backup recovery. Gather evidence from the agreed systems, record gaps and identify which answers need further checking.

Discuss the scope and quote

What the evidence looks like

Illustrative sample · constructed example

One access rule, two sign-in outcomes.

Pilot policy · administrator access

Selected check

Does the pilot policy enforce the intended access condition?

Conditional Access / test matrixIllustrative

PILOT / ADMINISTRATOR SIGN-IN

ACTORPilot administratorAgreed method and device condition

POLICY TESTReport-only observationObserve the out-of-condition sign-in before enforcement.

RESOURCEMicrosoft 365 admin centerNamed resource in this constructed sign-in test

Emergency access has a separate test and restricted runbook. This pilot result does not close the exception register.

Conditional Access / test matrix: constructed inspection record
Test case	Expected behavior	Sample review
Intended administrator	Allow sign-in under the agreed conditions.	Pilot observation
Outside policy conditions	Deny access when the enforced rule requires it.	Report-only observation
Emergency access	Test the separate recovery route and its runbook.	Separate test required
Exceptions	Name the exception owner and review conditions.	Owner review required

Report-only observation is not enforcement. The sample does not certify the tenant or establish insurer acceptance.

Microsoft guidance: report-only policy evaluation

Evidence: Report-only observation identifies a sign-in outside the intended condition.
Decision: Review before enforcement
Next action: Correct the policy or document the exception and test emergency access.

Illustrative sample. Evidence covers the tested control and identities; insurer or auditor acceptance is not guaranteed.

The relevant scope

Start with a defined piece of work

The scope, the price, and how you will know it is finished are agreed in writing before anyone is given access. Review the engagement below for its deliverables, responsibilities and acceptance criteria.

The engagement

MFA and Conditional Access Hardening

MFA and Conditional Access configured, piloted and enforced under tested policy, administrator access cleaned up, and the evidence carriers ask about assembled from the live tenant: the method inventory, the policy register, the test results and the exception register. Whether a carrier accepts the answers stays the carrier’s decision.

See what it delivers Discuss the scope and quote

Not sure this is the one?

Describe what happened, in a paragraph. We’ll review your request and follow up about scope and next steps.

Discuss the scope and quote

What happens next

1Describe what happenedA few short fields: company size, environment, and what is going wrong.
2We’ll review your request and follow up about scope and next steps.The most direct next step, or a clear answer that AZ Innovations is not the right fit.
3A fixed-fee proposalNamed scope, price, and how you will know it is finished. No obligation.