Cyber insurance applications for small businesses got noticeably stricter heading into 2026 — insurers now routinely deny claims or refuse coverage when a company can't demonstrate basic IT controls were in place at the time of a breach. For a Miramar or Broward County business renewing or shopping for a policy this year, the technical requirements section of the application has become almost as important as the price. This checklist covers what insurers are actually asking for and how to get IT-ready before you apply.
Why insurers are asking for more
Ransomware payouts and business email compromise claims rose sharply industry-wide over the past few years, and insurers responded by tying coverage — and pricing — directly to whether specific controls are documented and enabled, not just promised on a form.
The core IT requirements insurers ask about
Multi-factor authentication
Required on email, remote access/VPN, and admin accounts at minimum. This is the single most commonly denied application item when missing.
Backups — and specifically, offline or immutable backups
A backup that's constantly connected to the network can be encrypted by the same ransomware attack. Insurers increasingly ask specifically whether at least one backup copy is offline, air-gapped, or immutable.
Endpoint detection and response (EDR)
Modern antivirus-only protection is often no longer sufficient — many applications now ask specifically about EDR, which can detect and stop an active attack rather than just known malware signatures.
Email filtering
Spam/phishing filtering beyond the default inbox protection built into Microsoft 365 or Google Workspace.
A written incident response plan
Even a one-page document naming who to call (including your MSP) and what to do first in a breach satisfies this requirement for most small-business applications.
Quick self-assessment
| Requirement | Typically asked on application | Common gap |
|---|---|---|
| MFA on email & remote access | Yes — nearly universal | Enabled for owners only, not all staff |
| Offline/immutable backups | Yes — increasingly specific | Backups exist but stay network-connected |
| EDR (not just antivirus) | Frequently, especially for $1M+ coverage | Still running consumer-grade antivirus only |
| Written incident response plan | Often, as a yes/no item | No document exists at all |
Getting IT-ready before you apply or renew
- Confirm MFA is enabled for every employee, not just owners and admins.
- Verify at least one backup destination is offline or immutable, and test a restore.
- Upgrade from consumer antivirus to a business EDR platform if you haven't already.
- Write a one-page incident response plan with your MSP's emergency contact listed.
- Ask your IT provider for a written attestation letter — many insurers now accept this in place of screenshots.
Applying for or renewing cyber insurance?
The Techie Guy assesses your current setup against what South Florida insurers are asking for in 2026, closes the gaps, and provides a written attestation letter your broker can submit with the application.
Request Free Consultation →Frequently Asked Questions
Often yes — insurers frequently offer discounts for documented MFA, EDR, and backup controls, on top of simply qualifying for coverage at all.
Yes — many insurers are re-underwriting existing small-business policies at renewal with the stricter 2026 requirements, even if the original policy didn't ask for them.
An MSP like The Techie Guy can provide the technical documentation and an attestation letter, but the application itself should be completed with your insurance broker.
Cyber insurance typically covers data breaches and ransomware, not physical storm damage — that's usually a separate business interruption policy, though a documented disaster recovery plan can support both conversations.
For most 5-30 employee South Florida businesses, MFA and email filtering can be live within a week; EDR rollout and a tested backup restore typically take 2-4 weeks.
Cyber insurance in 2026 rewards businesses that can actually prove their controls, not just claim them on a form. Getting IT-ready before you apply protects both your coverage and your claim if you ever need it. The Techie Guy can assess your Miramar or Broward County business against current insurer requirements — call 786-481-9288 or message us on WhatsApp.