Evisent completes your cyber insurance renewal questionnaire or licensee attestation from your Evisent Live evidence and attaches the pack.
Questionnaires differ in wording, not in substance. These come up on almost every cyber insurance renewal and licensee attestation, and here is where each answer comes from.
| They ask | How the answer is backed |
|---|---|
| Is MFA enforced? | Evisent Live reads MFA enforcement for every user from Microsoft Entra, and Conditional Access policies alongside it. The pack shows the count, dated. |
| Do you run endpoint detection and response (EDR)? | Coverage is read from your endpoint protection and detection tools: how many devices are protected and reporting. |
| Are backups in place and tested? | Backup status and the last restore test go into the pack from Evisent's records, labelled as entered rather than read, until your backup tool is connected to Evisent Live. |
| How quickly do you patch? | Missing critical updates are read from your patching tool, device by device, and shown as a count. |
| Do you have an incident response plan? | Evisent Live doesn't read documents, so this answer comes from your plan itself. We ask for it, check the date it was last tested, and say so if a test is due. |
| Are staff trained in security? | Completion for the quarter goes into the pack as a count, entered by Evisent from your training platform and labelled as entered until it is connected. |
If the evidence can't show something, we say so on the form rather than guess. The answer and the declaration stay yours.
Forward the renewal questionnaire or attestation, with the due date.
Each answer is completed from your Evisent Live evidence, and anything it can't show is flagged.
You check every answer. The declaration is yours.
The dated Live Evidence Pack, with its verification code, is attached to the submission.
Your renewal questionnaire or licensee attestation, completed from your evidence.
One submission a year is included with Evisent Managed IT. A second insurer, a mid-year licensee request or an extra attestation is charged per submission.
Fraud, cyber evidence and complaints, together.
Client Instruction Guard, Complaints & Breach Register and Insurer & licensee submissions, for financial advice practices.
Prices ex GST. Insurer & licensee submissions draw on Evisent Live, so they are for Evisent managed clients. Not managed yet? A Live Audit gives you 30 days of Evisent Live on your Microsoft 365 tenant.
Yes. The answers come from Evisent Live, which is included with Evisent Managed IT. If you are not a managed client yet, a Live Audit gives you 30 days of Evisent Live on your Microsoft 365 tenant.
You do. We complete it from your evidence and flag anything the evidence can't show, you review it, and the declaration stays yours.
Then the answer is no, with what it would take to change it. We don't round answers up. If it's something we can fix before the renewal date, we'll tell you.
We can't promise that. Premiums are the insurer's decision. What we can do is make sure your answers are accurate and backed by evidence.
No. It is evidence of configuration, read from your own systems. It is not an audit, a certification or an opinion of compliance, and a high score doesn't mean a practice can't be breached.
For your profession: financial advice, insurance brokers, legal and accounting.
Thirty minutes to see what your evidence would say. If nothing needs doing, we will tell you.