mplementing robust cyber risk management before considering cyber cover is essential. Insurers will often impose specific conditions that must be met before purchasing cyber insurance.

We recommend that you at least take advantage of the Cyber Essentials training for charities, designed by the National Cyber Security Centre.

Some of the standards that insurers will often impose before offering cyber cover:

▶ Enabling multi-factor authentication for cloud-based services (e.g. email providers).
▶ Only using a Virtual Private Network (VPN) to access your environment.
▶ Taking offline backups that will be unaffected by issues with the live environment.
▶ Regular training on awareness of cyber threats and preventative measures for staff and volunteers (see Cyber Essentials).