Cybercrime continues unabated, growing in sophistication, frequency and severity. In fact, cyber risk is among the top risk concerns of companies globally. CNA CyberPrep, built on nearly two decades of cyber insurance expertise, is a proactive program of cyber risk services developed by CNA Risk Control and CNA Cyber insurance underwriters in partnership with leading cybersecurity specialists.
CNA CyberPrep is available to all CNA cyber policyholders, providing them with a network of cybersecurity professionals and services to actively identify, mitigate and respond to their cyber risks. CNA CyberPrep is modeled on industry-leading cybersecurity frameworks for standards, guidelines and best practices, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework, and is rooted in strong partnerships with highly regarded cybersecurity professionals.
Identify Current Cybersecurity Posture
A select group of vendors and services help insureds identify the strengths and weaknesses of their cybersecurity posture, while also providing recommendations for further cybersecurity steps.
- CNA Risk Control Gap Analysis
- CNA Risk Control Information Security and Cyber Infrastructure Self-Assessment
- WhiteHaX – Cloud-Based Penetration Test
- CyberArk – Privileged Access Security Assessment
- External Vulnerability Assessments*
- Penetration Testing*
- Risk Assessments*
Mitigate Potential Cybersecurity Risk
Cybersecurity recommendations are put into action by additional vendors and services, which help insureds enhance their cybersecurity posture by mitigating potential cyber risk.
Respond to Cybersecurity Incident
Security incidents are often high-pressure situations. CNA’s incident response vendors have a deep understanding of critical steps to minimize an incident’s impact and provide help after one occurs.
- Breach/Privacy Counsel
- Forensic Investigation and Remediation Firms
- Notification Vendors
- Credit Monitoring Vendors
- Public Relations Firms
- Incident Management
CNA cyber insureds may choose from fee-based preferred pricing services*, and value-added options, which are included as part of their CNA cyber policy.