Cyber insurance readiness: insure the risk that remains
No control removes every risk. We make you ready for cyber insurance in Singapore: the controls insurers ask for, their questionnaire answered with evidence, and an introduction to a licensed broker. We are not an insurer or a broker; we get you ready, then hand you to one.
Ransomware through a vendor’s credentials cost one Singapore logistics group S$120,000.PDPC, Aug 2024
Who asks for it, and what it shows them
The questions people ask you, and what this answers.
- Insurers“Is multi-factor sign-in mandatory for remote access, remote desktop and admin accounts?”Evidence that multi-factor sign-in is in place answers the insurer’s question.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
- Insurers“Are backups offline or isolated, and tested annually?”Evidence of isolated, tested backups.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
- Insurers“Do you install patches within 30 days of release?”A patching record answers the insurer’s question on patching within 30 days.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
- Insurers“Do you have an incident response plan, and when was it reviewed?”A dated, reviewed plan.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
MSIG’s Singapore cyber proposal form asks about multi-factor sign-in for remote and admin access, offline and tested backups, patching within 30 days, staff training and incident response plans. Any missing control shows up in the answers the insurer underwrites on.
MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026What we do
We are not an insurer or a broker. We get you ready, then hand you to one.
Why insurers ask more questions
Common questions
Do you sell insurance?
No. We are not an insurer or a broker. We help you become insurable and introduce you to a licensed broker.
Why would an insurer turn us down?
Usually because a basic control is missing or cannot be shown: multi-factor login on email and remote access, offline backups, timely patching or an incident response plan.
Does insurance replace PDPA compliance?
No. A policy can pay for some costs of a breach, but it does not remove your PDPA obligations or a PDPC finding.
Latest PDPC case on this topic · 2026-08-05 · Construction, engineering and manufacturing · Voluntary undertaking
Relying on an IT vendor does not remove your responsibility: know how your servers are secured and maintained, and check the vendor is doing it.
Read the PDPC decision of 5 August 2026, on pdpc.gov.sg (opens in a new tab)Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)