Contact Capital Techies for Expert IT Solutions

Capital Techies Cyber Insurance Calculator

Welcome to the Capital Techies Cyber Insurance Calculator!

Click below to begin your assessment.

PRIVACY

Does your company have a Chief Privacy Officer?

A Chief Privacy Officer (CPO) is a senior executive responsible for developing and implementing an organization's privacy policies and strategies.

Question 1

Yes

No

PRIVACY

Does your company have a publicly available Privacy Policy?

A publicly available privacy policy is a statement of how an organization collects, uses, and protects the personal information of its customers.

Question 2

Yes

No

NETWORK SECURITY

Does your company use up-to-date firewalls?

An up-to-date firewall is a security system that monitors and controls network traffic and is configured with the latest updates to protect against emerging threats.

Question 2

Yes

No

NETWORK SECURITY

Does your company use multifactor authentication (MFA) for remote system access or any access that connects to networks with cardholder data?

MFA, also called two-factor authentication or 2FA, requires users to provide two or more forms of identification before granting access to a system.

Question 2

Yes

No

NETWORK SECURITY

Does your company enforce minimum password complexity requirements?

For example, minimum password length, character requirements, or rules about uniqueness.

Question 2

Yes

No

NETWORK SECURITY

Does your company engage in regular periodic penetration testing to determine vulnerabilities?

Penetration testing, also known as "white hat" hacking, uses simulated attacks to identify system vulnerabilities. It is recommended to be conducted at least annually.

Question 2

Yes

No

NETWORK SECURITY

Does your company use Endpoint Detection & Response (EDR) tools to monitor your systems and networks?

EDR technology monitors and responds to cyber threats at endpoints like laptops, desktops, and mobile devices, using advanced analytics and machine learning.

Question 2

Yes

No

STANDARDS AND COMPLIANCE

Does your company require annual Security Awareness Training for all employees?

Security Awareness Training is education provided to staff about cybersecurity risks.

Question 2

Yes

No

STANDARDS AND COMPLIANCE

Does your company maintain an inventory of sensitive data?

Sensitive data includes cardholder data (e.g., credit card numbers, PINs, CVV), passwords, addresses, email addresses, dates of birth, and personally identifiable information (e.g., biometric or health information).

Question 2

Yes

No

STANDARDS AND COMPLIANCE

Does your company use end-to-end encryption when transmitting cardholder data?

End-to-end encryption is a security measure that protects cardholder data by encoding it at the point of origin and decoding it only at the intended destination, preventing unauthorized access during transmission.

Question 2

Yes

No

STANDARDS AND COMPLIANCE

Does your company conduct annual audits to verify compliance with formal Information Security Policies?

Audits refer to the process of reviewing and evaluating security controls and practices against established policies to ensure they are being followed correctly.

Question 2

Yes

No

STANDARDS AND COMPLIANCE

Does your company maintain and enforce policies that require minimum security controls from third-party vendors?

Vendor controls include, but are not limited to, policies that specify minimum vendor security standards, periodic review of vendor access rights, prompt revocation of unneeded vendor rights, and logging and monitoring vendor access to the company's system.

Question 2

Yes

No

LAPTOP AND MOBILE DEVICES

Does your company enforce a policy of privileged access management?

Privileged access management is controlling and monitoring access to critical systems by "privileged users" such as system administrators and IT personnel.

Question 2

Yes

No

LAPTOP AND MOBILE DEVICES

Does your company require the use of a Virtual Private Network (VPN) for remote system access?

A VPN is a secure, encrypted connection between a device and a remote server, allowing the user to access a private network as if they were directly connected.

Question 2

Yes

No

LAPTOP AND MOBILE DEVICES

Does your company store and monitor network and security logs?

Network and security logs" are records of network activity and security-related events that are captured to monitor potential security threats.

Question 2

Yes

No

LAPTOP AND MOBILE DEVICES

Does your company maintain a formal policy governing Data Retention & Disposal?

Data Retention & Disposal policy is an organizational-level Information Policy governing the handling of data.

Question 2

Yes

No

INCIDENT RESPONSE

Does your company have a written Incident Response Plan (IRP)?

An IRP is a pre-defined procedure for minimizing damage and facilitating recovery after a cybersecurity event.

Question 2

Yes

No

INCIDENT RESPONSE

Does your company have a recovery time objective of less than 24 hours?

Recovery Time Objective is the estimated amount of time it will take to restore critical business functions following a network or systems interruption.

Question 2

Yes

No

INCIDENT RESPONSE

Does your company use segregated end-of-life software?

Segregated end-of-life software is software no longer supported by the vendor. It is recommended to isolate this software from active systems as a precautionary measure.

Question 2

Yes

No

INCIDENT RESPONSE

Does your company store its data backups on air-gapped networks or devices?

An air-gapped network or device is a computer or network that is physically isolated from the internet or any other unsecured network.

Question 2

Yes

No

Capital Techies Insurance Calculator

Thank you for completing the Cybersecurity Insurance Calculator intake questionnaire.
We're crunching the numbers to produce your results.
To see your score and estimated premium, enter the following information:

Name:(Required)

Company:(Required)

Email(Required)

Capital Techies Insurance Calculator Results

Thank you for completing the VENZA Cybersecurity Insurance Calculator assessment. Based on the information provided, your results are as follows:

Number

Expected Premium: 125% to 150% of the industry average

Interpreting your results

Your score is measured on a scale from 0 to 100. It is calculated using a weighted formula that assigns value to each answer with a “yes” response. The categories of Privacy, Network Security, and Standards and Compliance receive greater weight than the categories of Laptop and Mobile Devices and Incident Response Plan.

Scores are then sorted into quartiles to determine your

75%+	Excellent
50% – 74%	Good
25% – 49%	Fair
0% – 24%	Poor

Based on your Risk Profile, you should expect to receive a positive or negative adjustment to your insurance premium relative to the industry average. Organizations with stronger Risk Profiles are seen by insurers as less risky and generally receive lower premiums. Organizations with weaker Risk Profiles are seen by insurers as riskier and generally pay more for insurance.

Studies of the cyber insurance market refer to this as a Security Factor Weighting . The calculator applies the Security Factor Weighting to each Risk Profile quartile as follows:

Risk Profile	Premium Relative to Average
Excellent	75%-85%
Good	85%-100%
Fair	100%-125%
Poor	125%-150%

Premium Relative to Average indicates how much you should expect to pay for insurance coverage compared to the average cost. For example, organizations with an “Excellent” Risk Profile expect to pay only 75% to 85% of the average cost – a discount of 15% to 25%. Organizations with a “Poor” Risk Profile may pay as much as 125% to 150% of the average cost.

Getting better insurance results with VENZA

Targeted investments in cybersecurity like those offered by VENZA’s Denali™ and Everest™ programs can improve your Risk Profile and improve your Security Factor Weighting. That helps you qualify for a great range of insurance options and pay less for the coverage you buy.

To learn more about how you can improve your privacy, network security, standards and compliance, laptop and mobile device security, and incident response planning with VENZA, contact sales@capitaltechies.com

Want a hard copy of your results?

Click below to export your results. We’ll send a PDF to the email address you provided.

Optimising your purchasing strategy, ensuring you invest smartly

Maximise uptime and support future growth

Optimise your network capability

Your go-to IT support partner

Clearly better cloud solutions

Get the most out of Microsoft 365

Govern, protect, detect, respond

Conference Room Solutions

Data Wiring and Structure Cabling

Give your business a competitive advantage

IT — a key weapon in your competitive armoury

An SA technology solution for our government agencies

Effective school IT solutions on your terms

IT solutions for tomorrow’s professional practices

A healthier solution for your IT challenge

Optimise capability to meet the need

Keep ahead of the curve

Making IT work better for your business

Building IT into the heart of your business

Extract full value from your IT investment

Awesome clients, awesome results

Awesome clients, awesome results

Empowering your digital journey

Premium partners, powerful results

Focused on you

Read all the latest

Get in touch

Contact

Capital Techies

Send us a message

Powerful Solutions

LinkedIn

Your Sector

Testimonials

Areas We Serve

Interpreting your results

Getting better insurance results with VENZA

Want a hard copy of your results?

Capital Techies Cyber Insurance Calculator

Welcome to the Capital Techies Cyber Insurance Calculator!

Click below to begin your assessment.

PRIVACY

Does your company have a Chief Privacy Officer?

A Chief Privacy Officer (CPO) is a senior executive responsible for developing and implementing an organization's privacy policies and strategies.

PRIVACY

Does your company have a publicly available Privacy Policy?

A publicly available privacy policy is a statement of how an organization collects, uses, and protects the personal information of its customers.

NETWORK SECURITY

Does your company use up-to-date firewalls?

An up-to-date firewall is a security system that monitors and controls network traffic and is configured with the latest updates to protect against emerging threats.

NETWORK SECURITY

Does your company use multifactor authentication (MFA) for remote system access or any access that connects to networks with cardholder data?

MFA, also called two-factor authentication or 2FA, requires users to provide two or more forms of identification before granting access to a system.

NETWORK SECURITY

Does your company enforce minimum password complexity requirements?

For example, minimum password length, character requirements, or rules about uniqueness.

NETWORK SECURITY

Does your company engage in regular periodic penetration testing to determine vulnerabilities?

Penetration testing, also known as "white hat" hacking, uses simulated attacks to identify system vulnerabilities. It is recommended to be conducted at least annually.

NETWORK SECURITY

Does your company use Endpoint Detection & Response (EDR) tools to monitor your systems and networks?

EDR technology monitors and responds to cyber threats at endpoints like laptops, desktops, and mobile devices, using advanced analytics and machine learning.

STANDARDS AND COMPLIANCE

Does your company require annual Security Awareness Training for all employees?

Security Awareness Training is education provided to staff about cybersecurity risks.

STANDARDS AND COMPLIANCE

Does your company maintain an inventory of sensitive data?

Sensitive data includes cardholder data (e.g., credit card numbers, PINs, CVV), passwords, addresses, email addresses, dates of birth, and personally identifiable information (e.g., biometric or health information).

STANDARDS AND COMPLIANCE

Does your company use end-to-end encryption when transmitting cardholder data?

End-to-end encryption is a security measure that protects cardholder data by encoding it at the point of origin and decoding it only at the intended destination, preventing unauthorized access during transmission.

STANDARDS AND COMPLIANCE

Does your company conduct annual audits to verify compliance with formal Information Security Policies?

Audits refer to the process of reviewing and evaluating security controls and practices against established policies to ensure they are being followed correctly.

STANDARDS AND COMPLIANCE

Does your company maintain and enforce policies that require minimum security controls from third-party vendors?

Vendor controls include, but are not limited to, policies that specify minimum vendor security standards, periodic review of vendor access rights, prompt revocation of unneeded vendor rights, and logging and monitoring vendor access to the company's system.

LAPTOP AND MOBILE DEVICES

Does your company enforce a policy of privileged access management?

Privileged access management is controlling and monitoring access to critical systems by "privileged users" such as system administrators and IT personnel.

Give your business a
competitive advantage

IT — a key weapon in your
competitive armoury

An SA technology solution
for our government agencies

Effective school IT
solutions on your terms

IT solutions for tomorrow’s
professional practices

A healthier solution for
your IT challenge

Optimise capability to
meet the need

Making IT work better for
your business

Building IT into the heart
of your business

Extract full value from
your IT investment

Awesome clients,
awesome results

Awesome clients,
awesome results

Empowering your digital
journey

Premium partners,
powerful results