Questions

Straight answers to what business owners ask about cyber insurance forms.

• Cyber insurance checklist for chiropractic and physiotherapy clinics

  Give every staff member their own login with two-step sign-in, on email and on your clinic system. Then encrypt and update every computer, check antivirus, keep a backup you unplug, set up DMARC, list outside logins, use a call-back rule for payments and train staff yearly. Each item below links to the steps.

• Cyber insurance checklist for therapists and counsellors

  Set up two-step sign-in on your email and your notes system, encrypt your laptop, turn on automatic updates, check your antivirus, keep a backup you unplug, set up DMARC on your email domain, and list anyone outside who can log in. Each item below links to the steps, and to how to save proof it's done.

• How do I add a real backup to OneDrive or Google Drive?

  OneDrive and Google Drive sync your files, so a deleted or scrambled file syncs everywhere. To have a real backup, add a backup service built for Microsoft 365 or Google Workspace, or export your files regularly to a drive you unplug. Protect the backup's admin login with two-step sign-in and keep a screenshot of the last backup.

• How do I check the answer to a question on my cyber insurance form?

  Don't guess. Check the setting yourself using the table below, or send the exact question to your IT provider in writing and ask for a dated screenshot. If the true answer is partly, fix the gap first or tell your broker exactly what's in place. Your answers need to be true when you sign.

• How do I prepare for my cyber insurance renewal questionnaire?

  Start from last year's answers. Re-check every yes against how your business is set up today, fix any gaps before the renewal date, and keep dated proof for each control, such as a screenshot or a log. That way the renewal form you sign is true on the day you sign it, not just last year.

• How do I save proof that each security setting is done?

  Make one folder for the policy year. As you finish each setting, take a screenshot that shows the setting turned on, which computer or account it's for, and the date. For things that aren't settings, like training or payment checks, keep a dated note or log. Leave client details and passwords out.

• How do I test my backups?

  Pick three files you use, restore them from your backup into a new folder, and open each one to check it looks right. Write down the date, what you restored and whether it worked. Do it at least once a year, or as often as your form asks, and keep the notes in one file as proof.

• What are the cyber insurance requirements for a small business in Canada?

  There's no single national list in Canada. Each insurer writes its own application form. Canadian forms commonly ask about MFA on email, backups, endpoint protection, updates, email filtering, encryption and staff training, and the Canadian Centre for Cyber Security's baseline controls for small businesses cover much the same ground.

• What do I do about Windows 10 computers?

  Windows 10 stopped getting regular security updates on October 14, 2025. Find every computer still running it, upgrade each one to Windows 11 if it can run it, and replace the ones that can't. If you have to keep one for now, write down what it's for and ask a tech to keep it apart from your other computers.

• What happens if I answer my cyber insurance application wrong?

  The form you sign says your answers are accurate and complete. Many applications also say that if anything in them isn't correct, the insurer can treat the insurance as if it never existed. In one public US case, an insurer and its customer agreed to void a policy over an MFA answer. Tell your broker, and fix the gap.

• Who should fill out and sign the cyber insurance application?

  A senior person at the business signs it, usually the owner, a partner or a director. Many forms say the signer must have made reasonable inquiry, meaning they asked the people who would know. Your IT provider can help gather the answers, but the business signs them and owns them.

• Why do cyber insurance claims get denied?

  Two documented patterns stand out. In a 2022 US case, an application said MFA was in place across the company, and both sides agreed to void the policy. In Hamilton, Ontario, CBC reported the city's insurer would not cover part of its claims because MFA was missing in many departments. Read your policy's conditions and make every yes true.