Cyber Liability Application NOTICE Cyber liability policies are generally written on a claims-made basis: only claims first made during the policy period (and reported as the policy requires) are covered. This application is not a binder. Prefer paper? Download the printable PDF · Questions? Call (469) 777-3025 or email contactus@proiexp.com. "*" indicates required fields Step 1 of 4 - General Information 25% Please answer every question and type directly into the fields. Choose N/A where offered. This application is not a binder.General InformationName of Applicant (Insured Organization)*Address* Address City State AlabamaAlaskaAmerican SamoaArizonaArkansasCaliforniaColoradoConnecticutDelawareDistrict of ColumbiaFloridaGeorgiaGuamHawaiiIdahoIllinoisIndianaIowaKansasKentuckyLouisianaMaineMarylandMassachusettsMichiganMinnesotaMississippiMissouriMontanaNebraskaNevadaNew HampshireNew JerseyNew MexicoNew YorkNorth CarolinaNorth DakotaNorthern Mariana IslandsOhioOklahomaOregonPennsylvaniaPuerto RicoRhode IslandSouth CarolinaSouth DakotaTennesseeTexasUtahU.S. Virgin IslandsVermontVirginiaWashingtonWest VirginiaWisconsinWyomingArmed Forces AmericasArmed Forces EuropeArmed Forces Pacific Zip Code Contact name*E-mail* Telephone*Date EstablishedState of IncorporationWebsite Revenues - last fiscal year ($)Please enter a number greater than or equal to 0.Estimated revenues - next 12 months ($)Please enter a number greater than or equal to 0.Description of business operationsNumber of employeesPlease enter a number greater than or equal to 0.Is the Applicant engaged in any of the following? (check all that apply) Adult content Cannabis Cryptocurrency or blockchain Debt collection Gambling Managed IT services (MSP / MSSP) Payment processing None of these Limit requestedRetention / deductible requestedRequested effective date Type of Private Information - Estimated Number of RecordsPersonal Identifiable Information (PII) - (i.e. - Social Security, Customer Info. or Biometric Data) - estimated number of recordsPlease enter a number greater than or equal to 0.Personal Healthcare Information (PHI) - (i.e. – Medical Records, Health Insurance Account) - estimated number of recordsPlease enter a number greater than or equal to 0.Financial Information - (i.e. – Credit Cards, Bank Account Information, Money/Securities) - estimated number of recordsPlease enter a number greater than or equal to 0.Third Party Corporate Information - (i.e. – Non-Disclosure Contract) Yes No Does the Applicant currently have cyber insurance? Yes No Current cyber carrierCurrent limitExpiration date In the last 3 years, has any insurer declined, cancelled or non-renewed cyber insurance for the Applicant? (Missouri applicants: do not answer) Yes No Declined / cancelled / non-renewed: details Governance ControlsAre you subject to any Regulations – Biometric Data Law, GDPR, CCPA or HIPAA? Yes No If yes, are you compliant including protocols to prevent the wrongful collection of Private Information? Yes No Does your organization have a Written Information Security Policy (WISP) and/or Privacy Policy? Yes No Vendor Risk Management Protocols - Cyber Risk Controls and Contractual Language? Yes No Is the Applicant compliant with Payment Card Industry Data Security Standards (PCI-DSS)? N/A Yes No Do you have an employee-training program relating to Cyber Risk, including Phishing? Yes No Security ControlsHow many network capable endpoints (computers or mobile devices) does the Applicant have in their care, custody or control?Please enter a number greater than or equal to 0.What is the approximate total dollar value of the computer system? ($)Please enter a number greater than or equal to 0.Do you have Firewalls? Yes No Do you have Anti-Virus – Static or Heuristic? Yes No Encryption tools on Private Information – At Rest, In-Transit and/or Mobile Devices? Yes No If possible, please provide some information around your encryption policy/procedure (Optional):End-Point Detection/Response (EDR) or Intrusion Detection/Prevention (IDR) Tool? Yes No Conduct Vulnerability Scanning and Patching for all platforms or applications? Yes No If yes, how often15. Do you have Multi-Factor Authentication enforced on the following platforms:15a. MFA - Privileged User Accounts Yes No 15b. MFA - Remote Access – Remote Desktop, Virtual Private Network, Virtual Desktop Infrastructure Yes No 15c. MFA - Email, including Office 365, G-Suite or other provider Yes No 15d. MFA - Critical platforms or applications to operate the business Yes No 15e. MFA - Critical platforms or applications that handle Private Information Yes No 15f. MFA - Backups or Recovery Yes No Do you have an email filtering tool including the ability to pre-screen, external source identification, attachments and links evaluation, quarantine, sandbox or automatic detonation of malicious emails? Yes No Do you take regular backups of all organizational critical platforms, applications or information? Yes No 17a. Are the backups encrypted? Yes No 17b. Is recovery of critical platforms, applications or information from backups documented? Yes No 17c. Are backups stored in a secure location (separate from network or system)? Yes No 17d. How frequently is data backed up?17e. How often is the recovery from backups being tested?17f. Recovery Time Objective (RTO) to restore from backups?Do you have plans in place for Incident Response, Business Continuity and Disaster Recovery? Yes No If one or more of these plans are in place, have they been tested? Yes No Does the Applicant use any end-of-life (no longer supported) software or hardware? Yes No Is Remote Desktop Protocol (RDP) open to the internet? Yes No Does the Applicant use a managed service provider (MSP) for IT? Yes No MSP name Media Content ControlsDoes the Applicant publish or distribute content/material (website, social media, marketing, publications)?* Yes N/A - No content/material published Choose N/A to skip the rest of this section.Content Review Process – Review Content/Material being disseminated prior to release? Yes No Does the Applicant obtain proper licensing for Content/Material? Yes No Does the Applicant have procedures in place to remove controversial Content/Material? Yes No Cyber Crime ControlsAre all wire transfers subject to a three step process: (a) initiation (b) approval and (c) release? Yes No If yes, are the steps completed by two or more authorized individuals? Yes No Is a callback or alternative notification process in place for all electronic transfers of funds? Yes No Do you train your employees concerning the detection of Business Email Compromise (BEC)? Yes No Declaration and SignatureDuring the past five (5) years, has the Applicant experienced any incidents, occurrences, Claims or Losses related to (i) a Network Security Breach, (ii) a Privacy Violation or (iii) a Privacy Threat or Security Threat stemming from the Applicant or does the Applicant have knowledge of a situation or circumstance which might otherwise result in a Claim against the Applicant with regard to issues related to the Insurance sought?* Yes No Please give complete detailsAttachments (optional) Drop files here or Select files Accepted file types: pdf, jpg, jpeg, png, doc, docx, xls, xlsx, Max. file size: 10 MB, Max. files: 10. Additional commentsThe undersigned, an authorized principal, partner or officer of the Applicant, declares that the statements in this application and any attachments are true and complete to the best of his or her knowledge after reasonable inquiry. If any information changes before the policy effective date, the Applicant will promptly notify us, and any quote or binder may be changed or withdrawn. Signing this application does not bind the Applicant or any insurer to complete the insurance, but if a policy is issued, the insurer will rely on this application and it will become part of the policy. The Applicant authorizes this information to be shared with insurance companies for the purpose of obtaining quotes.FRAUD WARNING: Any person who knowingly and with intent to defraud any insurance company or other person files an application for insurance containing any materially false, incomplete or misleading information, or conceals for the purpose of misleading any fact material thereto, commits a fraudulent insurance act, which is a crime and may subject the person to criminal and civil penalties, including fines, imprisonment and denial of benefits. Additional state-specific fraud notices may apply and will be provided by the insurer where required.Applicant statement* I have read the declaration and fraud warning above and agree to them. Name (Please Print)*Title (Must be Principal, Partner, or Officer)*Signature*Your NameYour NameYour NameYour NameDate* How did you hear about us?