Do cyber insurers require endpoint detection and response on every device?
Many ask for it on all laptops and servers, and some ask what share of devices it covers, so check the exact question. Endpoint detection and response (EDREDR: endpoint detection and response. Security software installed on each computer that watches what happens on that machine.) is software on each computer that watches processes and files and can isolate a machine. It cannot run on many devices, such as printers, cameras, phones, building controls or industrial equipment, and it is missing wherever someone forgot to install it. Answer with real numbers: count your devices, count those with EDR and explain the rest and how they are protected, for example by network separation. Network detection is the usual complement, because it sees traffic from every device on a monitored segment, with or without an agent. NetSenX is that complement: it watches devices and connections, not processes inside a host, and it is not an EDR. Its network map shows the devices seen on each monitored segment, which helps you find the ones your EDR count is missing.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- What do cyber insurers ask about ransomware protection?
- Why was our cyber insurance renewal declined or made more expensive?
- Do cyber insurers require round-the-clock security monitoring?
- Does automated alerting count as 24/7 monitoring for an insurer?
- Can our managed service provider run NetSenX so we can answer yes on 24/7 monitoring?
Terms used here
- EDR (endpoint detection and response)
- Security software installed on each computer that watches what happens on that machine.