eSentire MDR supports insurability to protect policyholders with enterprise grade technology, 24/7 SOC support, and decades of security operations leadership.

Do you have an Endpoint Detection and Response (EDR) solution in place for all endpoints?

Policyholders need adequate endpoint detection with managed detection and response (MDR). EDR and MDR are critical components of any effective cybersecurity program, delivering improved detection, 24/7 threat hunting, deep investigation, and end-to-end coverage.

Do you have a vulnerability management program in place?
How often do you perform internal/external vulnerability scanning and penetration testing?

Managed vulnerability identifies risks for policyholders and will help build continuous awareness of the threat landscape, identify vulnerable systems, and prioritize and remediate them immediately.​

Do you train your staff at least annually on security threats and do you conduct phishing testing of your users on a quarterly basis?

To qualify for cyber insurance coverage, policyholder organizations must run regular security awareness training and testing. This ensures employees are up-to-date on security threats and procedures, businesses can help reduce their risk of becoming a victim of a cyber attack.​

Do you have a Network Detection and Response (NDR) solution in place that monitors north/south traffic and east/west traffic, 24/7?

Policyholders need the ability to monitor network traffic around-the-clock, automatically disrupt malicious traffic and respond to detected threats 24/7 so threat actors cannot complete attacks against their network environments.

Do you centrally collect and store logs via a SIEM or Log Management platform?

Storing log data via a SIEM or Log Management platform provides visibility for policyholders across network assets, endpoints, applications and cloud services enabling context and correlation that is needed when alerts and security incidents need to be investigated.

Do you have someone internally responsible for cybersecurity, have a formal Information Security Policy and run annual risk assessments?

Virtual CISO (vCISO) services can help policyholders perform a Security Program Maturity Assessment, create a cyber roadmap that reduces your risk, and do annual re-assessments.

Do you have a documented incident response plan and is it tested annually?

IR experts can work with policyholder leaders on Security Incident Response Planning (SIRP) and development, as well as table top exercises.