BRK-2026-0142
SME Technology Client
Broker Partner A · Technology / SaaS · Limit requested $5.0m
Broker submission
What the platform received
Automated referral flags
Why the platform did not bind
Underwriting assistant
Advisory note
Risk presents as a mid-market technology operator with partial cyber hygiene and an elevated contractual liability profile. Several declarations are incomplete or ambiguous and the requested ransomware extension sits outside the published appetite band. Recommend referral to underwriter with structured broker clarification before any indication of terms.
- — Confirmed MFA enforcement across all privileged and remote-access accounts
- — Backup segregation architecture and immutable copy attestation
- — EDR vendor, coverage percentage and 24/7 monitoring arrangement
- — Clarification of prior cyber incidents in last 36 months
- — Sample of largest 3 downstream customer contracts (liability caps and indemnities)
- Q1. Please confirm whether MFA is enforced for all privileged accounts AND all remote workforce access, including third-party administrators.
- Q2. Provide architecture statement confirming backups are segregated from production identity / domain and include at least one immutable copy.
- Q3. Confirm EDR vendor, the percentage of endpoints in scope, and whether monitoring is 24/7 in-house or via an external SOC.
- Q4. Please clarify the prior incident question for the last 36 months — specifically whether any event involved data exfiltration, regulator notification, or ransom demand.
- Q5. Provide the liability cap and indemnity profile for your three largest customer contracts to assess contractual exposure.
- — Requested ransomware extension exceeds the published appetite band for technology accounts at this revenue tier.
- — Contractual liability profile suggests a sub-limit may be more appropriate than the requested aggregate.
- — Issue structured broker clarification request (advisory — underwriter to approve)
- — Hold pricing until evidence pack returns
- — Capture appetite signal for Product Lead review
Advisory only — generated deterministically from submission fields. The underwriter remains the decision-maker.
Broker clarification
Request evidence pack
- Q1. Confirm MFA
- Q2. Provide backup architecture
Broker evidence
Custody & withholding
The current role Underwriter 1 does not have authority to perform this action. Switch role to proceed.
- MFA enforcement attestation (signed)ev:mfa-attest-2026-001 · Broker Partner A
- Backup architecture statement with immutable copy diagramev:backup-arch-2026-001 · Broker Partner A
- EDR coverage report (95% endpoints)ev:edr-coverage-report · SME Technology Client
- Prior incident clarification narrativeev:incident-clarification · Broker Partner A
- Top-3 customer contracts (full text)ev:customer-contracts-redacted · SME Technology Client
- Raw SOC logs (90 days)ev:soc-logs-raw · SME Technology Client
- MFA attestationref: ev:mfa-attest · custodian: Broker Partner A
- Raw SOC logsref: ev:soc-logs · retained by SME Technology Client
Withheld content never leaves source. Only a count is recorded on the receipt.
Underwriter decision
Approve, modify, decline or escalate
Accept on modified basis with MFA enforcement and ransomware sub-limit
Pricing: +12%
Structure: sub-limit
Exclusions: Ransomware Extension
Appetite feedback loop
Signal to product / portfolio
The current role Underwriter 1 does not have authority to perform this action. Switch role to proceed.
review ransomware band
Latest governed action
Signed receipt
Insurer holds appetite signal; no raw broker data shared
Product Lead authorised to record appetite signal
Appetite feedback recorded for portfolio leadership
Audit trail