Insider Risk Self-Assessment – Cyber Insurance Readiness Check

Between 80% and 96% of cyber-insurance applications turn on the same handful of controls. This tells you how you would score before you sign the form.

The Insider Risk Self-Assessment is a guided review of the people-and-process side of security — the part no scanner can see. It walks you through the questions an insurer, an auditor or a large client will ask, records your answers, and returns a scored report showing where you stand and what to fix first.

What it covers

• Multi-factor authentication — where it is enforced, and where it is quietly optional
• Joiner, mover and leaver process: what actually happens to access when someone leaves
• Least privilege — who has more access than their job needs
• Third-party and contractor access to your systems and data
• Backup and recovery practice, including whether a restore has ever been tested
• Incident response: who is called, in what order, at 2am
• Acceptable use, device and data-handling expectations set in writing

What you get

• A written PDF report emailed back to you, typically within one business day.
• A control-by-control scored readiness picture, rated Critical / High / Medium / Low.
• Answers written in the language insurance applications use, so you can transcribe them straight across.
• A prioritised remediation plan for the gaps, cheapest and highest-impact first.
• Reporting built to CompTIA Security+ and PenTest+ practice standards.

Who it's for

Small businesses applying for or renewing cyber insurance, businesses being vetted by a larger client, and owners who suspect their weakest link is a process rather than a machine.

Requirements

• Windows 10 or Windows 11
• Run as administrator
• About 15 minutes and honest answers

What this is not

This assessment is built from your own answers, and the report says so — it reflects what you told it, not an independent verification. It is not a certification, an audit or an attestation, and it is not insurance advice. It pairs naturally with the Account & Access Review, which checks the technical side of the same questions.

One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.