Small business cyber safety guide

What to Check Before Answering Cyber Insurance Questions

A plain-English guide to checking MFA, backups, updates, device lists, user lists, admin access and basic cyber process before insurance or tender questions.

Based on public ASD/ACSC Essential Eight guidance. Written for Australian small business owners who want a practical next step, not jargon.

Your IT & Tech Mates cyber insurance questions checklist hero image showing evidence for two-step login, backups, updates, admin access, device list, user list and offboarding.
Cyber Safety Shorts guide image from Your IT & Tech Mates.
Quick answer

Before answering insurance, supplier or tender cyber questions, collect what you can prove: two-step login, backups, updates, devices, users, admin access and basic recovery steps.

Plain-English explanation

This guide keeps the business problem first, then shows how it relates to the Essential Eight. It is a practical support guide, not a formal certification, audit, legal advice or insurance advice.

An insurer, client, supplier or tender form asks about cyber security. The questions mention MFA, backups, device security, admin access and policies, but you are not sure what evidence you have.

Business owner scenario

An insurer, client, supplier or tender form asks about cyber security. The questions mention MFA, backups, device security, admin access and policies, but you are not sure what evidence you have.

What can go wrong

  • Guessing can create problems if the answer is later checked.
  • Screenshots may be incomplete if they do not show the right setting or date.
  • Old staff access and untested backups can weaken otherwise good answers.
  • Different insurers or clients may require their own format.

What to do now

  • Collect screenshots or reports for two-step login.
  • Check backup reports and do a restore test.
  • List devices and users.
  • Review admin access and old staff accounts.
  • Keep notes about who to contact during a cyber incident.

What not to do

  • Do not call a preparation checklist a formal audit.
  • Do not assume one evidence pack fits every insurer or tender panel.
  • Do not provide answers you have not checked.
Related free tool

Use the related Your IT & Tech Mates tool to turn this guide into a simple self-check and practical next step.

Local help from Your IT & Tech Mates

Need help turning this into real protection? Your IT & Tech Mates can help set up two-step login, backups, updates, admin access, safer devices, and a plain-English cyber action plan for your business.

Related guides and tools

FAQ

Is this a formal Essential Eight audit?

No. This is a plain-English guide based on public ASD/ACSC Essential Eight guidance. It is not a formal government certification or audit.

Can Your IT & Tech Mates help set this up?

Yes. We can help with practical setup such as two-step login, backups, updates, admin access reviews, safer devices and plain-English action plans.