> to properly assess the risk of their clients I've sat through a lot of these insurance company cyber risks assessments. It's absurd. You get asked a questio

> to properly assess the risk of their clients I've sat through a lot of these insurance company cyber risks assessments. It's absurd. You get asked a question like "did you pay for a firewall?". Then you say yes. Then you get asked to prove it by showing them an invoice. Repeat the question for antivirus. Throw in password expiry question and boom, you're low risk.