Your Cyber Policy is a Security Control: Why CISOs Need a Seat at the Table
Cyber Defense, Sunday, September 7th, 2025
It's that time of the year again- time to renew the corporate cyber insurance policy, and as the most senior cyber security professional in the company you are asked to fill out the annual cyber security questionnaire.
From the CIO or CISO's chair it can seem like the different underwriting questions asked by each carrier have little to do with your reality of managing security risk at the company. Based on the regularity of the questions asked, you could be led to believe that MFA or PAM defined your cyber security posture, but you know your primary risk is not in having MFA enabled- it's all in the implementation.