I work for a large insurer underwriting cyber. For large companies the answer is a clear yes. At least we do this. It is not very complicated process, but depe

I work for a large insurer underwriting cyber. For large companies the answer is a clear yes. At least we do this. It is not very complicated process, but depending on the IT/OT complexity it might take 1-2 weeks to gather the data since it usually requires the input from many stakeholders within the company. What I'm always amazed by: companies think protection only when thinking about cyber. But that's not how an insurance thinks about. You have got to take into account what is at stake, too.