Insurance Agency CyberSecure
Starter Kit$149
Professional$249
Insurance agency cybersecurity
Cybersecurity policies for independent insurance agencies
An information security program for agencies and brokerages: policies, a policyholder advisory, payment and policy-change verification, incident playbooks and a workbook to keep the evidence.
- Editable Word & Excel
- Instant download
- One-time purchase
Why it matters
What state insurance data security laws expect
Many states have adopted versions of the NAIC Insurance Data Security Model Law, which expects licensees to maintain a written information security program, assess risk, oversee third-party service providers and notify the insurance commissioner promptly, often within 72 hours, after a cybersecurity event. Small-agency exemptions vary by state.
Agencies licensed in New York are also subject to the NYDFS cybersecurity regulation (23 NYCRR 500).
Carriers increasingly ask agencies about their security controls, and criminals target premium payments and policy changes by email. This kit covers both.
What's inside
Every file in each edition
Policy numbers carry over from the Starter Kit to the Professional Edition, so you can start small and upgrade without renumbering.
Starter Kit
$14923 editable files
Policies 15
- INS-CYB-001Information Security Program Policy
- INS-CYB-002Cybersecurity Roles & Responsibilities Policy
- INS-CYB-003Risk Assessment Policy
- INS-CYB-004Password & Authentication Policy
- INS-CYB-005Access Control Policy
- INS-CYB-006Multi-Factor Authentication Policy
- INS-CYB-007Acceptable Use Policy
- INS-CYB-008Security Awareness & Training Policy
- INS-CYB-009Email & Phishing Security Policy
- INS-CYB-010Endpoint Security Policy
- INS-CYB-011Mobile & Remote Work Policy
- INS-CYB-012Nonpublic Information Protection & Encryption Policy
- INS-CYB-013Backup & Recovery Policy
- INS-CYB-014Cybersecurity Event Response & Notification Policy
- INS-CYB-015Business Continuity & Disaster Recovery Policy
Plans, guides & assessments 7
- WordImplementation Guide
- WordStaff & Producer Cybersecurity Quick Guide
- WordIncident Response Plan
- WordPolicyholder Payment & Policy Change Advisory
- Word30-60-90 Day Action Plan
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
Workbook 1
- ExcelInsurance Agency CyberSecure Toolkit
Professional Edition
$24942 editable files
Policies 21
- INS-CYB-001Information Security Program Policy
- INS-CYB-002Cybersecurity Roles & Responsibilities Policy
- INS-CYB-003Risk Assessment Policy
- INS-CYB-004Password & Authentication Policy
- INS-CYB-005Access Control Policy
- INS-CYB-006Multi-Factor Authentication Policy
- INS-CYB-007Acceptable Use Policy
- INS-CYB-008Security Awareness & Training Policy
- INS-CYB-009Email & Phishing Security Policy
- INS-CYB-010Endpoint Security Policy
- INS-CYB-011Mobile & Remote Work Policy
- INS-CYB-012Nonpublic Information Protection & Encryption Policy
- INS-CYB-013Backup & Recovery Policy
- INS-CYB-014Cybersecurity Event Response & Notification Policy
- INS-CYB-015Business Continuity & Disaster Recovery Policy
- INS-CYB-016Third-Party Service Provider Security Policy
- INS-CYB-017Generative AI Acceptable Use Policy
- INS-CYB-018Vulnerability & Patch Management Policy
- INS-CYB-019Records Retention & Disposal Policy
- INS-CYB-020Payment, Payee & Policy Change Verification Policy
- INS-CYB-021AI Governance Policy
Plans, guides & assessments 10
- WordProfessional Edition Implementation Guide
- WordIncident Response Plan & Playbooks
- WordTabletop Exercise Kit
- Word30-60-90 Day Action Plan
- WordStaff & Producer Cybersecurity Quick Guide
- WordPolicyholder Payment & Policy Change Advisory
- WordInformation Security Program Summary & Applicability Worksheet
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
- Word50-Question Insurance Agency Cybersecurity Self-Assessment
Forms & templates 10
- FORM-01Payment, Payee & Policy Change Verification Form
- FORM-02Access Request Form
- FORM-03Staff & Producer Offboarding Checklist
- FORM-04Software & SaaS Request Form
- FORM-05Security Exception Request
- FORM-06Cybersecurity Event Intake Form
- FORM-07Third-Party Service Provider Questionnaire
- FORM-08Policy Acknowledgment Form
- FORM-09Cybersecurity Event Notification Worksheet
- FORM-10Annual Program Report & Management Review
Workbook 1
- ExcelInsurance Agency CyberSecure Professional Toolkit
Free download
Free Insurance Agency cybersecurity self-assessment
Answer 50 yes / no / not sure questions across 10 areas. Score your results and get clear next steps for your industry.
- Small Business, Law Office, Real Estate, Healthcare, Accounting & Tax, Insurance Agency, Financial Advisor, Auto Dealer, Mortgage & Title, and Cyber Insurance Readiness editions
- Starred priority questions and a scoring table
- Printable PDF
Your assessment is ready
Thanks. Your download should start automatically. If it doesn't, use the button below.
Download the PDFQuestions about your results? Email info@cybriva.ai.
Questions
Insurance Agency kit FAQ
Does my state's law apply to my agency?
It depends on your state and agency size. The kit explains the common requirements of the NAIC model law. Confirm your state's version and any exemptions with your regulator or counsel.
Is there a policyholder warning?
Yes. Both editions include a policyholder advisory about payment and policy-change fraud that you can brand and send.
What format are the files in?
Editable Microsoft Word policies, plans and forms plus an Excel workbook. You download everything right after checkout and customize it for your organization.
Can I start with the Starter Kit and upgrade later?
Yes. The Professional Edition keeps every Starter Kit policy under the same ID number, so nothing you have already customized gets renumbered.
Is this legal advice or a certification?
No. Cybriva provides templates and education. It is not legal advice, an audit, a certification or a guarantee of compliance or security. Have your attorney review documents that carry legal obligations.