Four years after its first insurance audit, a distributor re-verifies its controls for a tougher ransomware application
A regional industrial distributor. Outcome verified
The problem
Four years after its first cyber insurance audit, a regional industrial distributor faced a tougher ransomware supplemental application from its insurer and a much-changed environment. The IT team knew many answers had shifted but could not say which controls it now met. A four-person team runs a Google Workspace environment with a heavily customized legacy ERP, so the assessment had to fit around them.
Why it mattered
An inaccurate application risks a denied claim or lost coverage.
What we did
Vizius verified each control the insurer asked about on its ransomware supplemental application, using interviews, console reviews, scans and a phishing test, and mapped evidence to each item. Along the way it pushed for decisions rather than findings, such as enabling DMARC on a secondary domain and adopting a password manager.
What changed
The insurer's application was completed with supporting evidence for every answer and reviewed with the client. The assessment triggered three follow-on commitments: an incident response plan with a tabletop exercise, recurring vulnerability scanning and a penetration test.
- Logistics and distribution
- Midsize company
- Cyber insurance requirements