Top 5 things tech underwriters love

Contractual management is key for businesses looking for tech insurance cover. Businesses should always work under some form of clear written agreement, to mitigate the risks associated with rapidly evolving projects. Managing scope creep is also essential. It’s all too common for changes to be made to project scope, so adopting a change-request control can make a big difference in ensuring consistency. 

Adopting a uniform strategy for handling limitations of liability also helps. Businesses should avoid direct links between contractual limits and insurance policies, instead specifying a fixed sum or aligning with the contract’s value to ensure clarity and accuracy in coverage. 

Robust data management policies are important for all technology businesses, particularly for those handling third-party data. We love to see businesses being thoughtful in their approach, using encryption across all data storage, transmission and processing. This helps to safeguard sensitive data and prevent the risk of data breaches.

On top of bolstering data security, having well-documented data destruction and retention policies is critical for regulatory compliance and risk management. We also look at how businesses store personally identifiable information (PII), and whether these practices comply with any local regulations that may be in place in a geographic region.

In this digital age, it’s difficult for any business to operate without access to its data. Our underwriters look to see if businesses have resilient backup practices, which enable them to ensure data continuity and mitigate the impact of potential disruptions. It’s a good idea to enforce immutability for at least one backup version, preventing unauthorised access and protecting against data loss.

By implementing strict access controls, businesses can also prevent any single account type from accessing all backed-up data instances, strengthening security and reducing the likelihood of unauthorised access or manipulation. 

With cyber threats growing in frequency and sophistication, no business can afford to stand still. To secure digital perimeters, it’s high-time to adopt a multi-faceted approach, addressing common vulnerabilities such as remote desktop protocol (RDP) ports. Shutting down exposed or unused ports will minimise avenues for unauthorised access and exploitation, acting as an initial line of defence. While implementing multi-factor authentication (MFA) adds another layer of security, requiring users to verify their identity through multiple authentication methods, significantly enhancing overall security posture and thwarting potential breaches.

Our underwriters also love to see endpoint detection and response (EDR) tools in use. With firewalls and antivirus software often unable to prevent more sophisticated cyber attacks, EDR tools can monitor a business’s technology infrastructure, to ensure it’s secure and free of malicious activity.

When it comes to technology, it’s crucial to stand out. But while flashy and exciting innovations may catch attention, ideas must still be tested and have substance.

The experience of directors can also be pivotal in instilling confidence and credibility within the industry. While some companies may attract substantial investment, it's equally essential that companies can allocate resources judiciously, prioritise sustainable growth and create longevity in this highly competitive landscape.