---
title: Incident response and claims history questions on cyber insurance applications
url: "https://insuranceposture.com/questions/incident-response"
section: Incident response and claims history
questions: 7
updated: 2026-08-24
---

# Incident response and claims history: what cyber insurance applications ask

Written plans, testing cadence, prior incidents, and knowledge of circumstances. The claims-history questions here carry the harshest consequence for an inaccurate answer.

## 7 questions in this section

- [Does the Applicant have a written Incident Response plan?](https://insuranceposture.com/questions/incident-response/applicant-written-incident-response-plan) (attested, not tenant-verifiable)
- [How frequently is the IR plan tested (quarterly/semi-annually/annually)?](https://insuranceposture.com/questions/incident-response/frequently-ir-plan-tested) (attested, not tenant-verifiable)
- [Does the Applicant have a written Business Continuity Plan / Disaster Recovery Plan, tested annually?](https://insuranceposture.com/questions/incident-response/applicant-written-business-continuity-plan-disaster-recovery-plan-tested) (attested, not tenant-verifiable)
- [In last 3 years, any cyber event, claim, loss, security breach, or extortion demand?](https://insuranceposture.com/questions/incident-response/last-3-years-cyber-event-claim-loss-security-breach) (attested, not tenant-verifiable)
- [Awareness of any fact / circumstance reasonably giving rise to a future claim?](https://insuranceposture.com/questions/incident-response/awareness-fact-circumstance-reasonably-giving-rise-future-claim) (attested, not tenant-verifiable)
- [Has the Applicant experienced any partial or total network interruption lasting more than 8 hours?](https://insuranceposture.com/questions/incident-response/applicant-experienced-partial-total-network-interruption-lasting-more-than) (attested, not tenant-verifiable)
- [Are copies of BCP/DR/IR plans stored so accessible if the Applicant's network is unavailable?](https://insuranceposture.com/questions/incident-response/copies-bcp-dr-ir-plans-stored-accessible-applicant-s) (partly verifiable from your tenant)

Full index: https://insuranceposture.com/questions

---

Insurance Posture by SecValley. https://insuranceposture.com
The question library is written in our own wording to reflect the control topics that recur across US cyber application and ransomware supplemental forms. No carrier form is republished.
SecValley is not a law firm, an insurance broker, an agent, or a carrier, and holds no producer licence. Nothing here is insurance advice, legal advice, or a coverage determination, and no attorney-client relationship arises from reading it. Statements about what a party to a cited case did, knew, or intended are allegations drawn from court filings and contemporaneous reporting, not findings of fact.
Your organization's authorized signer remains responsible for the accuracy of any application. Consult a licensed broker and qualified counsel before binding.