--- title: Security Requirements for Cyber Insurance description: Canadian insurers have responded to the rise of cyber attacks and increasing cost per breach by requiring SMBs to implement standard security measures. --- [Skip to content](https://blog.yournucleus.ca/cyber-insurance#main-content) [![Nuc-logo-sketched-1 (1)](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/Nuc-logo-sketched-1%20(1).png?width=220&height=44&name=Nuc-logo-sketched-1%20(1).png "Nuc-logo-sketched-1 (1)")](https://yournucleus.ca) - About Show submenu for About ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [About Nucleus](https://yournucleus.ca/about/) - [Careers](https://yournucleus.ca/careers/) - [History](https://yournucleus.ca/about/history/) - [Team](https://yournucleus.ca/about/team/) - Services Show submenu for Services ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Managed IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity Services](https://yournucleus.ca/services/cybersecurity-services/) - [Managed AI Solutions](https://yournucleus.ca/services/managed-ai-solutions/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [vCIO](https://yournucleus.ca/services/vcio/) - [ALL](https://yournucleus.ca/services/) - Results Show submenu for Results ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Architecture](https://yournucleus.ca/results/architecture-engineering-construction/) - [Legal](https://yournucleus.ca/results/legal/) - [Mining](https://yournucleus.ca/results/mining/) - [All](https://yournucleus.ca/results/) - [Blog](https://blog.yournucleus.ca) - About Show submenu for About ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [About Nucleus](https://yournucleus.ca/about/) - [Careers](https://yournucleus.ca/careers/) - [History](https://yournucleus.ca/about/history/) - [Team](https://yournucleus.ca/about/team/) - Services Show submenu for Services ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Managed IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity Services](https://yournucleus.ca/services/cybersecurity-services/) - [Managed AI Solutions](https://yournucleus.ca/services/managed-ai-solutions/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [vCIO](https://yournucleus.ca/services/vcio/) - [ALL](https://yournucleus.ca/services/) - Results Show submenu for Results ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Architecture](https://yournucleus.ca/results/architecture-engineering-construction/) - [Legal](https://yournucleus.ca/results/legal/) - [Mining](https://yournucleus.ca/results/mining/) - [All](https://yournucleus.ca/results/) - [Blog](https://blog.yournucleus.ca) [Contact](https://yournucleus.ca/contact/) [1-844-301-HELP](tel:1-844-301-4357) # Security Requirements for Cyber Insurance October 3, 2022   |  [Security](https://blog.yournucleus.ca/tag/security) The Canadian insurance industry has responded to the rise of ransomware attacks and increasing cost per breach by requiring businesses that operate with any online presence or remote offering to have Multifactor Authentication (MFA) implemented, a data breach response plan in place, and cybersecurity awareness training. Businesses must demonstrate that they have adequate security measures to protect their customers’ and employees’ identity and personal information to secure insurance against cyber attacks and data breaches.  ![oct newsletterv3](https://blog.yournucleus.ca/hs-fs/hubfs/oct%20newsletterv3.png?width=800&name=oct%20newsletterv3.png) **What is MFA?** The simplest authentication standard is known as Multi-Factor Authentication (MFA). It combines something you know with what you have, like a smartphone to strengthen your security posture.  MFA and Single-Sign-On (SSO) should be applied to all cloud applications. SSO is a way to use one of your main services as your identity provider, such as your email. Pointing your other cloud services to authenticate with one source ensures that you are not inundated with a bunch of credentials to manage and allows your organization to have better control and administration. **What is included in a Data Breach Response Plan?** A data breach is defined as a cyber attack in which personal, confidential, or protected data has been accessed or disclosed in an unauthorized way. Common causes of a data breach include: weak or stolen credentials, application vulnerabilities, unauthorized employee access (insider threats), malware, accidental leaks, lost or stolen devices, insecure email and more. Given the sheer number of daily cyber incidents, every business (yes, of every size) should have a data breach response plan in place. [NIST 800-53](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final), one regulatory standard we adhere to at Nucleus takes a four-pillar approach that includes the elements below. Every plan, however, should be updated on an ongoing basis to respond to evolving risks and be tested regularly: - Preparation  - Detection and analysis - Containment - Post-incident activity  **Your Microsoft Secure Score** If your business has adopted [Microsoft 365](https://yournucleus.ca/services/microsoft-365/), you are now provided with a security score. A Microsoft Secure Score is a real-time measurement of an organization’s security assigned by Microsoft to help organizations best understand their security posture and how to improve it. Having a strong Microsoft Secure Score is not just important for risk awareness and keeping on top of your cybersecurity roadmap, but it’s also now being requested for by some insurers for cyber liability insurance.   **How can a Managed IT Service Provider** **(MSP) help?** An MSP will assist businesses identify their risks and implement standard security tools and best practices that help prevent data breaches and/or reduce the severity of an incident. One of the best ways to ensure your cybersecurity solution is meeting the standards now required by Canadian insurers is to complete an IT assessment. During an IT assessment, an MSP will review all aspects of the IT environment and assess employees’ security awareness and best practices as it pertains to IT security. At Nucleus, we deliver a Cybersecurity Scorecard following an IT assessment which highlights the businesses’ current security posture, benchmarked against industry IT security best practices. Each scorecard category will outline the current state, risk level, and recommendations for remediation. > **Cyber attacks are increasing in Canada, with the average cost of cybercrime costing Canadian organizations a whopping $6.75 million per incident in 2021. -*IBM Security Report 2021*** Nucleus has developed our cybersecurity assessments based on experience, trends, industry best practices and three cybersecurity frameworks: NIST 800-53, CIS Controls V8.1 and MITRE ATT&CK Matrix. NIST 800-53 is a regulatory standard that defines the minimum baseline of security controls for all U.S. federal information systems except those related to national security. CIS Controls V8.1 (formerly known as Critical Security Controls) provides specific and actionable ways to stop today's most pervasive and dangerous attacks. The final framework, MITRE ATT&CK Matrix helps us bridge gaps across different parts of an organization. An MSP can also assist in implementing a [Security Awareness Training](https://blog.yournucleus.ca/cybersecuritytraining) program for your staff. Unfortunately, most cybersecurity breaches are caused by human error and it’s now more critical than ever for employees at businesses of every size have some basic cybersecurity awareness training. Learn about our offering [here. ](https://blog.yournucleus.ca/cybersecuritytraining) **You Cannot** **‘Set and Forget’ your Cybersecurity Solution** Every approach to cybersecurity needs to be layered, you cannot simply put a solution in place that will offer protection forever. Cyber threats and the technologies that protect our businesses from such threats are constantly evolving. Working with an MSP will help your organization identify your risks at any given time and help your business evolve your cybersecurity maturity. A strong cybersecurity solution is one that is reviewed and refreshed on an ongoing basis. For more information regarding security, [contact us.](https://yournucleus.ca/contact/) [![Meet with us](https://no-cache.hubspot.com/cta/default/21084037/74d1b1b8-5e86-4a15-ac2d-3571ad862187.png)](https://cta-redirect.hubspot.com/cta/redirect/21084037/74d1b1b8-5e86-4a15-ac2d-3571ad862187) ![Nucleus Pulse Image](https://blog.yournucleus.ca/hubfs/nucleus-images/Group%20399.png) ![Picture of Nucleus Networks](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/nuc_dog.png?width=115&name=nuc_dog.png) [Nucleus Networks](https://blog.yournucleus.ca/author/nucleus-networks) ## We are local! WE HAVE PRESENCE IN VICTORIA, VANCOUVER, PRINCE GEORGE, CALGARY, AND TORONTO. [Victoria](https://yournucleus.ca/victoria/) [Vancouver](https://yournucleus.ca/vancouver/) [Calgary](https://yournucleus.ca/calgary/) [Toronto](https://yournucleus.ca/toronto/) [Prince George](https://yournucleus.ca/prince-george/) ## Ready to take your business to the next level? [Get Started](https://yournucleus.ca/contact/) ![pulse animation](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/pulse-animation.gif?width=806&height=61&name=pulse-animation.gif) ![Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo](https://blog.yournucleus.ca/hubfs/nucleus-images/Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo.png "Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo") ![Apple-and-Microsoft-Office-Ready](https://blog.yournucleus.ca/hubfs/nucleus-images/Apple-and-Microsoft-Office-Ready.png "Apple-and-Microsoft-Office-Ready") **FRIENDLY** [twitter](https://www.twitter.com) [facebook](https://www.facebook.com) [linkedin](https://www.linkedin.com) [instagram](https://www.instagram.com) ### ABOUT - [History](https://yournucleus.ca/about/history/) - [Careers](https://yournucleus.ca/careers/) - [Our Team](https://yournucleus.ca/about/team/) - [Blog](https://blog.yournucleus.ca/) ### SERVICES - [IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity](https://yournucleus.ca/services/cybersecurity-services/) - [vCIO Services](https://yournucleus.ca/services/vcio/) - [Cloud Services](https://yournucleus.ca/services/cloud-services/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Managed Voice](https://yournucleus.ca/services/managed-voice-services/) ### CONTACT US - 1 844 301 4357 - [sales@yournucleus.ca](mailto:sales@yournucleus.ca) - [help@yournucleus.ca](mailto:help@yournucleus.ca) - careers@yournucleus.ca ### LOCATIONS - VANCOUVER 880 – 505 Burrard St. [+1 604 682 3444](tel:%20+1-604-682-3444) - VICTORIA [+1 844 301 4357](tel:%20+1-844-301-4357) - CALGARY [+1 587 393 1141](tel:%20+1-587-393-1141) - TORONTO [+1 416 628 3718](tel:%20+1-416-628-3718) © 2023 NUCLEUS  |  [TERMS OF USE](https://yournucleus.ca/terms-of-use/)  |  [PRIVACY POLICY](https://yournucleus.ca/privacy-policy/)  |  POWERED BY LOOMO ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Nucleus Networks", "url" : "https://blog.yournucleus.ca/author/nucleus-networks" }, "dateModified" : "2025-05-14T11:32:13.727Z", "datePublished" : "2022-10-03T22:11:46.000Z", "headline" : "Security Requirements for Cyber Insurance", "mainEntityOfPage" : { "@id" : "https://blog.yournucleus.ca/cyber-insurance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.yournucleus.ca/hubfs/Illustrated%20Logo.png" }, "name" : "Nucleus Networks Inc." } } ```