Cyber insurance with practical cyber hygiene value built in.
UpSure cyber clients may be eligible for a CyberCert Gold SMB1001 Level 3 credit, helping Australian SMBs, startups and technology businesses strengthen cyber readiness while arranging insurance.
Directors need more than a policy sitting in a folder.
Cyber resilience is now a director-level governance issue. Boards, investors, customers and insurers increasingly want to see that a business is identifying, monitoring and improving its cyber posture, not simply reacting after an incident.
As a technology specialist broker, UpSure believes in adding practical value around the insurance placement. The CyberCert Gold credit helps eligible members move from cover arranged to controls improved, with a clearer path to demonstrating cyber hygiene.
Advanced measures for compliance-heavy industries.
CyberCert Gold is designed for businesses in compliance-heavy sectors such as finance, healthcare and retail, where directors, customers, investors and insurers increasingly expect evidence of formal security governance and mature technical controls.
FAQWhat are the 27 Gold requirements?
The checklist is kept here for transparency. CyberCert confirms the applicable assessment pathway, evidence and eligibility criteria.
- 01Engage a technical support specialist for your organization.
- 02Install and configure a firewall.
- 03Install anti-virus software on all organization devices.
- 04Automatically install tested and approved software updates and patches on all organization devices.
- 05Install TLS certificates on all public internet facing websites.
- 06Ensure all servers are updated and patched.
- 07Implement Endpoint Detection and Response (EDR).
- 08Ensure strong password hygiene is maintained.
- 09Ensure employee accounts do not have administrative privileges.
- 10Ensure employees have individual user accounts.
- 11Implement a password manager system.
- 12Multi-factor authentication (MFA) on all employee email accounts.
- 13MFA on all business applications and social media accounts.
- 14Ensure Remote Desktop Protocol (RDP) occurs only over Virtual Private Network (VPN) connections.
- 15Email Authentication and Anti-Spoofing.
- 16Implement a backup and recovery strategy for important digital assets.
- 17Purchase and maintain business or cyber insurance.
- 18Confidentiality agreement for all employees, contractors and third parties.
- 19Implement a policy with procedures to manage invoice fraud.
- 20Implement a visitor register.
- 21Implement a cybersecurity policy.
- 22Implement a response plan for cyber related incidents.
- 23Utilize secure methods of physical document destruction.
- 24Ensure all computer devices that store sensitive, private and confidential information are disposed of securely.
- 25Implement and maintain a digital asset register.
- 26Implement a policy for the responsible and secure use of AI technology.
- 27Conduct cybersecurity awareness training for all employees.
Cyber usually sits beside a broader risk program.
Four steps from quote to practical cyber uplift.
Start with eligibility
Choose the instant or detailed quote pathway and tell us about the business, activities, revenue, data profile and current controls.
Place the right cover
If the risk fits the instant pathway, it can move faster. If it needs nuance, the UpSure broking team reviews the risk properly.
Bind the policy
Once the policy is bound, your coverage documents confirm the insurance arranged and the relevant policy details.
Receive the credit
Eligible clients receive the CyberCert Gold credit details with their coverage documents, helping turn cover into a practical cyber improvement pathway.
Choose the quote path that fits the risk.
Use Instant Quote for eligible straightforward risks, or choose Detailed Quote when the business needs a broker-reviewed pathway, broader market access or more context around the placement.
Information is general in nature and does not take into account your objectives, financial situation or needs. Cover is subject to the terms, conditions and exclusions of the relevant policy.