What is the Applicant's annual gross revenue (current / previous fiscal year)?
Revenue is the primary rating input on most cyber submissions and the anchor for business interruption cover.
What the carrier is actually asking
The carrier wants gross revenue for the current and previous fiscal years, usually consolidated across the group. It uses the figure to price the policy, to sense-check the limit, and as an input to business interruption calculations.
Why it is underwritten
Revenue correlates with the size of the organisation, the number of records held, and the daily cost of an outage. It is the closest available proxy for how large a loss could be, which is why it drives rate more than any other single field.
Where the answer lives in Microsoft 365, Entra ID, and Azure
This is a financial disclosure that should match your accounts.
| Platform | Where the setting lives | What has to be true |
|---|---|---|
| Accounts | Statutory or management accounts for the periods requested | The figure matches your filed or audited accounts. Attested |
| Scope | Which entities are included | Consolidated figures consistent with the named insured on the policy |
| Projections | Forecast revenue where the year is incomplete | A stated basis for any projection rather than an unlabelled estimate |
| Business interruption | Daily or hourly revenue derived from the annual figure | The derived figure used to size business interruption cover |
| Changes | Acquisitions or disposals during the period | Disclosed, since they explain movements and affect the named insured |
Revenue reported from two years ago on a growing business produces a limit sized for a smaller company. The premium saving is trivial and the shortfall at claim time is not. Update the figure at every renewal.
What a defensible yes requires
- The figure matches your accounts for the stated period.
- The entities included match the named insured.
- Projections are labelled as such with a basis.
- Acquisitions and disposals are disclosed.
- The limit purchased is sized against the current figure rather than a historical one.
How this answer goes wrong
The figure covers the operating company while the policy names the group, or it excludes a subsidiary whose systems share the same tenant. Both create a mismatch between what is insured and what generates the exposure.
Frequently asked
Which figure do carriers want?
Gross revenue, consolidated across the entities to be insured, unless the form says otherwise. If in doubt, state the basis you used.
What if revenue changed significantly?
Disclose it and explain. A large movement without explanation invites questions; with an explanation it is routine.
Does revenue set the limit?
It informs it. Limit adequacy depends more on record counts, regulatory exposure, and the cost of an outage, which are separate questions.
Do we include intercompany revenue?
Usually not. Use the consolidated external figure and state your basis if the structure is unusual.
Related questions
Stop answering this from memory
Connect Microsoft 365, Entra ID, and Azure read-only. Insurance Posture reads the live configuration behind each application answer and shows you which ones you can prove before you sign.
Assess your posture