Cyber Insurance Readiness Review for Adelaide SMBs: Make Sure Your Ransomware Claim Actually Pays Out
Your bookkeeper logs in on Monday morning and every file on the shared drive has a new extension. There is a ransom note on the desktop. Production is stopped, your team is sitting around, and somewhere in a drawer is the cyber insurance policy you renewed last year. You call the broker. The first question the insurer’s panel firm asks is whether you had MFA on all admin accounts, whether backups were segregated, and whether your endpoint protection logs are available. If any answer is “not really”, your claim is in trouble. Cyber Insurance Readiness Review from Cyber by Exegesis is the engagement designed to confirm — before renewal, and well before a ransomware incident — that the controls listed on your policy match what your business actually does.
The problem
Ransomware is consistently the highest-impact cyber loss category for Australian SMBs. The ACSC Small Business Cyber Security Guide is clear about the controls that matter: multi-factor authentication, patched operating systems and applications, restricted administrative privileges, and regular backups that are tested and kept offline or segregated. Cyber insurance policies sold into the Australian SMB market now list those same controls as warranties or conditions precedent — meaning if you attested to having them and you did not, the insurer can deny the claim.
The gap most Adelaide SMBs do not see is the gap between the proposal form they signed and the operational reality of their environment twelve months later. MFA gets disabled on a service account so an integration will work. A backup job starts failing silently. An admin account gets shared. None of that is unusual, and none of it is malicious — but each of those drift items is a defensible reason for an insurer to refuse to pay a ransomware claim. The OAIC Notifiable Data Breaches scheme then adds a second exposure: if the ransomware incident also involves access to personal information, you have a statutory notification obligation regardless of whether the insurer pays.
What Cyber Insurance Readiness Review does
Cyber by Exegesis runs a fixed-scope pre-renewal or pre-claim review aligned to your specific policy wording:
- A control-by-control walkthrough of your cyber insurance policy schedule, warranties, and conditions precedent — we work from the document you actually signed, not a generic checklist.
- Evidence collection per control: MFA coverage across admin and standard accounts, patch currency for operating systems and key applications, administrative privilege inventory, and backup configuration including segregation and last successful restore test.
- A gap register that flags each control where the evidence would not survive an insurer’s post-incident review, ranked by claim-denial risk.
- A short remediation plan for the gaps, scoped so your IT provider or internal admin can close them before renewal.
- A written report you can hand to your broker at renewal showing the controls are in place and evidenced — and a parallel note on Notifiable Data Breaches scheme obligations should a ransomware event also expose personal information.
Cyber by Exegesis is the cyber consultancy line of Exegesis, the same company behind the DRMO live product. Our scope here is readiness, not incident response. We do not negotiate with attackers and we do not replace your broker; we make sure the controls on the policy and the controls in your environment are the same set.
How it works
- We confirm the engagement scope on a short call and request a copy of your current cyber insurance policy schedule and any proposal form responses you still have.
- We map every listed control or warranty to an evidence requirement and request read-only access to the relevant systems (identity tenant, endpoint console, backup platform).
- We collect the evidence, document what we found per control, and build the gap register.
- We sit with you or your IT provider for 45 minutes to walk through the gaps and agree which ones are closed before renewal and which are accepted risks.
- We deliver the written report and a renewal-ready evidence pack you can share with your broker.
Why this matters in Adelaide
Adelaide’s SMB base is concentrated in manufacturing, defence supply chain, professional services, and health — sectors where ransomware downtime translates directly into contract penalties, regulator interest, or patient-safety exposure. Many Adelaide SMBs hold cyber insurance through state-level brokers, and renewal cycles cluster around the financial-year boundary. An Adelaide SMB that walks into renewal with a documented, evidenced control set tends to get a better outcome on premium and a claim that actually pays if ransomware hits — which, for a manufacturer that cannot ship for a week, is the difference between an interruption and an extinction event.
Sources
- ACSC Essential Eight Maturity Model: https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/essential-eight/essential-eight-maturity-model
- ACSC Small Business Cyber Security Guide: https://www.cyber.gov.au/protect-yourself/resources-protect-yourself/personal-cyber-security-guides
- OAIC Notifiable Data Breaches scheme: https://www.oaic.gov.au/privacy/notifiable-data-breaches
- Cyber by Exegesis — Cyber Insurance Readiness Review (waitlist)
Join the waitlist
We are sequencing engagements by renewal date and by sector. Join the waitlist with your renewal month and current insurer or broker — we will tell you when we are ready to take a brief from your business.