Cyber risk control for insurance pools and their members
We deliver the work, check the controls insurers look at, and show every member and their pool what is improving.
Services
Seven services, one CyberToolkit. Your pool decides which ones your Toolkit includes.
Risk assessments
A graded review of your security controls, with a prioritized fix list.
Learn moreAssessVulnerability scanning
External, internal and web application scans for known weaknesses.
Learn moreAssessDomain security review
A passive check of the email and web settings that stop spoofing of your domain.
Learn moreReducePhishing simulations and training
Realistic practice emails, with short training for anyone who clicks.
Learn moreReduceEDR and MFA support
Help putting endpoint protection and multi-factor authentication in place, when your pool requests it.
Learn moreAdvisePolicies and incident response planning
Policy templates and an incident response plan fitted to your organization.
Learn moreAdvisevCISO guidance
A security leader on call for roadmaps, insurance questions and cyber risk management.
Learn moreReportEvery service, one report
See how results roll up for each member and for the pool.
Toolkit reportingOne Toolkit, built to lower risk over time
Every service feeds the next. What an assessment finds shapes the work that follows.
Assess
Find where the risk is.
Reduce
Close the gaps that lead to claims.
Advise
Guidance from people who do this every day.
Report
Show progress to members and their pool.
Every service rolls up into one picture
Members see what is in place and what to fix next. Their pool sees engagement and progress across the whole membership.
Engagement across the program year
Share of members that have used at least one service, by month.
| Month | Members engaged |
|---|---|
| Jul | 12% |
| Aug | 24% |
| Sep | 35% |
| Oct | 44% |
| Nov | 52% |
| Dec | 58% |
| Jan | 63% |
| Feb | 69% |
| Mar | 74% |
| Apr | 79% |
| May | 83% |
| Jun | 86% |
Controls in place across the membership
Share of members with each control, first program year versus second.
- Year one
- Year two
| Control | Year one | Year two |
|---|---|---|
| Multi-factor authentication | 58% | 81% |
| Security awareness training | 62% | 88% |
| Endpoint detection and response | 46% | 72% |
| Tested, offline backups | 51% | 70% |
| Critical patches within 30 days | 43% | 64% |
| Incident response plan | 38% | 61% |
An extension of your team
Whether your security program is mature or just getting started, the CyberToolkit meets you where you are. We work alongside your IT staff, mostly remote and on site when it helps. Most of our members are schools and education organizations with a small IT staff and a lot to protect.
Schools and districts
Colleges and universities
Public entities
Faith-based and nonprofit organizations
Cybersecurity your members will actually use
We deliver the services, check the controls underwriters ask about, and report progress across your whole membership.
How the Toolkit works for pools* Figures are internal estimates of cumulative activity since 2016, rounded down. They are not audited counts.