Transfer · Problem-solving Use-Case

Assess the OT controls in every industrial submission.

Turn the questionnaire and documents already in the submission into an underwriting verdict, with OT evidence you can check. The applicant is asked nothing.

Your first result is a DeRISK™ UWA short report on one submission, with the evidence behind it. The underwriter makes the call.

What you face

We receive industrial submissions but can’t judge the OT controls in them.

The questionnaire says one thing. The documents behind it may say another. Someone has to read both.

10–30 hours
Each file takes hours of manual work.DeNexus estimates a complex OT submission takes 10–30 hours of manual work. DeRISK brings it to an assessment in 10–20 minutes.1DeNexus, DeRISK UWA
Out of scope
Cyber models leave out physical attacks.A widely used US cyber loss model covers digital attack vectors only. Physical attacks and physical supply-chain effects are out of its scope.2Guidewire Cyence with Guy Carpenter, US Cyber Industry Exposure Database and Loss Curve, 2025
28% vs 57%
A “yes” on a form is hard to check.In one survey of 400+ respondents, 28% said their OT was fully isolated from IT, while 57% said servers could be controlled from the business network. Answers on a submission form can conflict in the same way.3(CS)²AI, OT Cybersecurity Technology Report 2024
The submission says little about OT.Most questionnaires were written for IT, so OT controls get thin answers. Few underwriting teams have an OT specialist to read what is there.
The hours go on extraction.Most of the manual time goes on pulling facts out of documents, before any judgement is made. The file waits while that happens.
Answers and evidence seldom agree.A “yes” on a form is hard to check against the documents behind it. Without an OT specialist, the doubt gets priced in.
How DeRISK solves it

From submission to verdict in three steps.

Augment your underwriting team with OT cyber specialist capability — without hiring one

Read the whole submission

DeRISK reads the questionnaire and the companion documents together, as one case. It is pre-trained on the main insurer and broker questionnaire formats, so you send what you already receive. The applicant is asked nothing.

Pre-trained on the submissions you already receive

Example submission. One broker-form answer on OT segmentation becomes a standardised record.

Score the OT controls

Each OT control is scored against the evidence in the file. IT and OT confidence are shown apart, so you see how much of the OT picture is backed by documents.

Confidence

Example submission. IT and OT confidence are scored separately, control by control.

Decide with clear conditions

You get a verdict with conditions precedent written in market terms. An underwriter reviews every output, and nothing binds without a person.

Conditions, in market terms

Example submission. Each condition shows when it applies and what evidence closes it.

What you get

The verdict, the loss it implies and the evidence behind it, shown here from the Underwriter sample report.

Key risk indicators

Loss outputs

Evidence trail

A decision you can defend

A human reviews every file

The underwriter decides. Nothing binds without a person.

Every finding traced

A full audit trail and attribution statement.

Your own actuarial model, on Enterprise

The Enterprise tier substitutes your actuarial model entirely.

Submissions stay private

Each runs in isolation, nothing trains the models, and client data is flushed after the run.

Where to start

Start free. Go further when the committee asks.

Standard is free: one submission and a short report. Professional is recommended, with multiple documents, committee-ready reports and saved analyses.

Free
Standard
Where you start

You add

  • One submission document, in a pre-trained questionnaire format

You get

  • A short report from the standard actuarial engine, on NIST CSF and IEC 62443-inspired frameworks
Premium
Professional
Most teams

You add

  • Multiple documents and custom submission types

You get

  • Committee-ready reports, white-labeled and saved, on your own insurer framework
  • Add-ons start here
Enterprise
At scale

You add

  • API access and a single-tenant option

You get

  • Your own actuarial model in place of ours, and your own report
Add-ons
From Professional

Choose

  • DeRISK Davy, DeRISK Consultant and DeRISK Scenario Simulator

Keep going

Sources

  1. 1.DeNexus. “DeRISK UWA.” DeNexus, www.denexus.ai.
  2. 2.Guidewire Cyence and Guy Carpenter. US Cyber Industry Exposure Database and Loss Curve. Guy Carpenter, 2025, p. 26.
  3. 3.(CS)²AI. OT Cybersecurity Technology Report 2024. (CS)²AI, Aug. 2024.

Run your first submission and see what the file says about OT.

Standard is free and assesses one submission with a short report. Professional adds multiple documents, committee-ready reports and saved analyses.

The applicant is asked nothing. An underwriter makes every call.