Tell good industrial risks from poor ones before you bind. Every submission gets an OT-specific analysis.
Your first result is a DeRISK™ UWA short report on one submission. It asks the applicant nothing, and the underwriter makes the call.
| Condition | When | Evidence | If unmet |
|---|---|---|---|
| MFA on all remote access, including vendors | Before binding | Configuration record or attestation | Bound with a remote-access exclusion |
| Offline, tested backups | Before binding | Latest restore test | Quote withdrawn |
| OT asset inventory | Subjectivity: within 90 days of binding | Inventory document | OT losses excluded from day 91 |
Conditions before binding, kept apart from post-bind subjectivities, each with its evidence and its consequence.
The form gets the same answers from a well-run plant and a poorly run one. The difference is in the OT evidence.
DeRISK reads the OT evidence in the whole submission, scores it and flags what matters. The underwriter decides.
The questionnaire and every document attached are read together, with IT and OT shown separately and a confidence score for each. Nothing is asked of the applicant.
Stated and verified controls, IT and OT, kept apart.
Example submission. IT and OT confidence, scored separately.
OT controls are scored and the critical concerns flagged, each with a recommended fix and a deadline. Every finding shows where it came from in the submission, so the file stands up at referral.
Every finding traces to the question or document behind it, with an attribution statement and a human review.
Example submission. One finding, with its source and the trail behind it.
See the risk against sector peers, then decline, bind with conditions, or bind. Conditions precedent are written in market terms, each with a deadline.
OT control maturity, 0 to 10, where 10 is best
Where this applicant sits among its sector peers, by control area, with its percentile. One applicant at a time, not a portfolio view.
Example submission. Key controls against sector peers, by percentile.
Two exhibits from the sample Underwriting Verdict report. One lists the three critical recommendations. The other shows how the premium changes once the conditions are met.
| Component | Value |
|---|---|
| Base premium | USD 200,000 |
| Risk factor (LOW) | × 0.92 |
| Risk adjustment for gaps | × 1.15 |
| Indicated premium | USD 211,600 |
| Suggested range | USD 185,000 – USD 245,000 (18-month binding period) |
| Reductions on completion of conditions precedent | Offline backup confirmation -USD 12,000 · DLP deployment -USD 20,000 · Sensitive data logging -USD 15,000 · OT segmentation -USD 25,000 |
The underwriter decides. Nothing binds without a person.
A full audit trail and attribution statement.
The Enterprise tier substitutes your actuarial model entirely.
Each runs in isolation, nothing trains the models, and client data is flushed after the run.
Standard is free: one submission and a short report. Professional is recommended, with multiple documents, committee-ready reports and saved analyses.
Standard is free and assesses one submission with a short report. Professional adds multiple documents, committee-ready reports and saved analyses.
The applicant is asked nothing. An underwriter makes every call.