2026 Cyber Controls Guide

The cyber insurance market has matured, and so have carrier expectations. Ticking boxes on an application is no longer enough. Insurers want proof that your controls work, are well governed and are part of how your organization runs every day.

Our new 2026 Cyber Controls Guide covers the cybersecurity controls that most often decide whether you can get coverage and what it costs. It's organized around six areas: Govern, Identify, Protect, Detect, Respond and Recover.

Inside, you'll find:

  • The controls insurers look at most closely. MFA, EDR, privileged access, incident response planning, backup and recovery, security monitoring and third-party vendor risk management.

  • Two new risks that are changing cyber risk fast. AI governance, and privacy claims that don't involve a breach, such as tracking pixels and unsolicited marketing texts and calls.

  • Plain-language explanations of each control, including why it matters to your organization and to your insurers.

  • Practical best practices you can start using today.

Click here to download the guide (opens a new window)to see where your controls stand and how to strengthen your resilience and your standing with insurers.