What cyber insurers ask about your backups.
Insurers refuse companies that don’t have the basics in order, or charge them more. Backup and recovery are on every questionnaire. This is what they ask, and what you can show with Immutec.
Five questions on almost every questionnaire.
What insurers ask differs per policy. These five come back almost everywhere.
| What the insurer asks | Why | What you can show with Immutec |
|---|---|---|
| Backups separated from your main systems, and quickly restorable | An attacker who is in your network must not be able to reach the copy. | A locked copy in our own data centre. Nobody in your network has a login to it, and neither does an attacker with your admin passwords. |
| At least one copy offline or immutable | Online backups that share the fate of production are worth nothing after an attack. | Every recovery point is locked for the retention period you choose. Nobody can change or delete it early. |
| Regular restore tests, written down | Date, system, restore time and what was found. | Every protected system is test-restored every week. You get the report. |
| Recovery times that are realistic | Whoever states four hours and needs three days has to explain it after a claim. | Recovery time and maximum data loss are agreed per service in your SLA and measured in the tests. |
| Restricted access to backup systems | Few people, strong authentication, everything logged. | You request a restore through a ticket. Our engineers carry it out, and every action is logged. |
Sources: Vanbreda Risk & Benefits in ITdaily, January 2026 · Datazone, Cyber insurance 2026: what insurers require, July 2026.
Your answers are read again after a claim.
What you fill in on the questionnaire is checked word for word when you claim. A weekly test report is an answer you can prove.
Recovery you can proveDisaster recovery is an insurance too.
A policy pays for the damage. Disaster recovery makes sure you can keep working. What is covered, how quickly it comes back and how much data you can lose is agreed per customer in an SLA.
Disaster recoveryFor your insurer
Test reports, retention and storage location on paper.
For your board
Who is responsible for what, written down before the first incident.
For your supervisor
The same evidence answers the questions NIS2 asks about business continuity.
Questions we get a lot
Something else? Call us on +31 (0)85 482 3400.
Does Immutec lower my premium?
That is up to your insurer. What we can do is give you evidence for the questions about backup and recovery: test reports, retention, storage location and who has access.
Can you help us fill in the questionnaire?
Yes, for the parts about backup and recovery. We answer them with you, based on what we actually run and test for you.
Do you work with insurers?
We deliver the evidence to you. You share it with your insurer or broker.
Bring your insurer’s questionnaire.
We go through the questions about backup and recovery with you and show which ones you can already answer with evidence.