Where the text comes from

Cyber Insurance Application Scanner holds the text of ISO 27001:2022, SOC 2 and NIST CSF 2.0, read clause by clause against the copy we hold. Each requirement is our statement of its clause, cited to it, not the instrument verbatim. Where a text is not held in full the page names it and does not state it. The carrier questions are public application documents, held from the source and refreshed by rebuilding the held snapshot, never fetched while you use the tool.

The frameworks

• ISO 27001:2022: ISO/IEC 27001:2022 (123 controls held)
• SOC 2: the AICPA 2017 Trust Services Criteria with the revised points of focus (61 controls held)
• NIST CSF 2.0: NIST Cybersecurity Framework 2.0 (106 controls held)

The held carrier applications

• Questions in a Coalition Cyber Policy Application: 8 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Chubb Cyber Enterprise Risk Management / Cyber and Privacy Insurance Short Form Application: 28 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber private enterprise Insurance application form (US): 10 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Insurance Application (revenues lower than $250M): 21 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber and Technology Professional Liability Insurance Application (US): 72 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Liability & Data Breach Response Coverage Application: 25 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Risk E-Business Cyber Loss and Liability Insurance Policy Application: 43 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• NetGuard Plus Cyber Liability Insurance Application (US): 45 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• AXIS Cyber Application for Small Business: 79 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• CyberRisk Renewal Application: 23 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• RT Connector Cyber Application: 18 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Corvus Smart Cyber Application: 21 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cowbell Cyber Prime 250 Renewal Application: 21 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Insurance Short Application: 7 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• The Solution for Cyber Risk - Ransomware supplement (US): 55 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Advantage Pro New Business Application: 19 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• CyberChoice Underwriting Application (held at build time): 33 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Information Security and Cyber Infrastructure Self-Assessment (held at build time): 29 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Application: 73 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Everest Cyber Elevation Insurance Policy New Business Application: 51 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Cyber Risk Insurance Proposal Form (UK) (held at build time): 16 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• Insurance Application - Cyber Risk (UK): 121 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)
• CyberClear Proposal form for companies sub-10 million turnover: 18 questions, read 2026-10-11 (the date this copy was read, not a version the document itself states)

Worked answers

• What counts as MFA on a cyber application
• How to answer the funds-transfer verification question

Evidence guidance is our words, from the held control area, not a statement of any standard and not binding on a carrier or an assessor. The full auditor-facing evidence guidance sits in the control data behind every mapping; a carrier page shows only the one or two items a carrier would actually ask for.