Carrier Workspace
Opportunities, quotes and policies, evidence review, material-change review, and carrier settings.
Carriers
Underwrite against current evidence, not a frozen questionnaire.
VitalSec gives cyber insurance carriers current evidence for underwriting, material changes, renewals, and claims while the insured remains in control of its environment.
01Submission02Evidence03Quote04Bind05Material change06Claim
Underwriting evidence
The security picture should not freeze when the policy is bound.
VitalSec keeps current evidence, important changes, corrective work, and retest results attached to the insured.
Before bind
Review the evidence
Review current control evidence, important exposures and exceptions, and how recent the evidence is.
The same insured recordCurrent controlsMaterial exposureEvidence freshness
The evidence continues beyond bind.
Before a decision
Review current control evidence, important exposures and exceptions, and how recent the evidence is.
After a decision
Follow important changes, corrective work, retesting, current state, and claim history.
Carrier workspace
Keep the evidence attached to the risk from review through claim.
RiskBid
The insured, broker, and carrier market workflow.
Evidence Continuity
Evidence behind the underwriting and policy history.
Claims Operations
Structured claim evidence for the carrier claims process.
Underwriting decision ledger
One risk record from submission through claim.
Each underwriting decision can point back to the current evidence that supported it, while later change, renewal, and claims activity remain connected to the same insured history.
Decision under uncertainty
See the current evidence before setting terms.
Underwriting improves when the carrier can see current control evidence, what changed, what remains unresolved, and how recent the proof is before terms are set.
Decision momentQuestionEvidence in viewWhat carries forward
01
Submission
Question
Is this risk ready for underwriting review?
Evidence in view
Current controls, proof freshness, material exposure, remediation, incident context
What carries forward
The evidence package stays attached to the submitted risk.
02
Quote
Question
What terms fit the risk that is actually in front of us?
Evidence in view
Inspectable control proof, unresolved exceptions, recent security change, current risk direction
What carries forward
Carrier response and quote remain tied to the evidence reviewed.
03
Bind
Question
What was known when the policy became effective?
Evidence in view
Bound terms plus the evidence and conditions that supported the decision
What carries forward
The security record does not disappear when the policy is bound.
04
Material change
Question
Did the insured's security state materially move after bind?
Evidence in view
New incidents, control change, remediation, retest, proof freshness, exposure movement
What carries forward
Change is compared with the prior record instead of treated as a fresh snapshot.
05
Renewal / claim
Question
What does the accumulated record say now?
Evidence in view
Policy history, material change, current evidence, incident timeline, Claims Operations support
What carries forward
Later decisions can reuse the same verified history.
Authority boundary
Carrier access is limited to the evidence and market workflow the insured has authorized. It does not give the carrier permission to alter controls, endpoints, identities, or other customer systems.
Inspectable control evidenceMaterial-change visibilityEvidence continuity after bindClaims-ready history
Research & white papers
Related research
Selected PatientLock papers on the issues covered here.
White paper
Material Change Between Bind and Renewal
A carrier framework for monitoring meaningful changes in control state, proof quality, exposure, and remediation during the policy period without turning every fluctuation into an underwriting event.
Central argument
Cybersecurity state does not freeze when a policy binds. Carriers can make better use of operational evidence when they define which changes deserve review and keep underwriting authority separate from the monitoring signal.
Written for: Cyber underwriters, carrier product leaders, actuaries, claims professionals, and underwriting operations.
White paper
Underwriting Cyber Controls with Evidence Quality
How freshness, completeness, provenance, conflict, and source scope improve cyber-control interpretation for insurance underwriting and later model calibration.
Central argument
Control state and evidence quality should be evaluated together because the same favorable control claim has different underwriting value when supported by current complete evidence versus stale, partial, or conflicting evidence.
Written for: Cyber underwriters, carrier model teams, underwriting operations, and actuaries.
White paper
From Cyber Questionnaire to Continuous Underwriting
How insurers can supplement annual cyber questionnaires with selective policy-period evidence, material-change logic, insured authority boundaries, and renewal history.
Central argument
Questionnaires remain useful for facts that require insured explanation, but cyber state changes after bind. Continuous underwriting begins by identifying the small set of operating changes worth observing during the policy period.
Written for: Cyber carriers, underwriting leaders, product managers, and actuarial teams.
White paper
Cyber Claims Control Evidence for Carriers
A carrier-focused evidence model for distinguishing pre-loss state, post-loss investigation, remediation chronology, scoped claims packages, and later underwriting feedback.
Central argument
Cyber claims can be reviewed more efficiently when pre-loss control evidence remains distinguishable from post-loss investigation and when the provenance and chronology of each item are preserved.
Written for: Cyber claims professionals, underwriters, carrier counsel, forensic coordinators, and model teams.
Talk to Jim
Talk through it with Jim.
Talk to Jim about VitalSec for cyber insurance carriers: underwriting evidence, material change, the Risk Compression Index, RiskBid, policy workflow, renewal, and Claims Operations.
Jim is based on PatientLock founder and CEO Jim Ford.