How Cyber Insurance Requirements Are Changing in 2026
What UK insurers now expect SMEs to have in place, and how to renew without unpleasant surprises.
Cyber insurance is no longer a tick-box renewal. UK insurers have tightened requirements every year since 2022 and 2026 looks set to continue the trend. SMEs that have not refreshed their controls are seeing premium increases, reduced cover or outright refusals.
What insurers are asking now
MFA on email, remote access and admin accounts. EDR on every endpoint. Tested offline or immutable backups. A documented incident plan. Email security including DMARC. Staff awareness training.
What is changing in 2026
Expect tighter scrutiny on supplier risk, evidence requirements for backup testing, and stricter wording around ransom payments. Some insurers are explicitly excluding payments to sanctioned threat actors.
How to prepare for renewal
Start 90 days before renewal. Run an honest control review. Close gaps that will affect either premium or coverage. Document what you have, with screenshots and policy references.
What happens when you cannot meet the requirements
Some insurers will quote with exclusions or sub-limits. Others will refuse. Brokers can help, but the underlying controls still need to be in place. We routinely help clients close gaps in time for renewal.
The bigger picture
Insurance is not a substitute for security. It is part of a layered approach. Treat the requirements as a useful checklist of what good actually looks like.
Frequently asked questions
Can a broker hide control gaps from the insurer?+
A broker may package an application, but misrepresentation invalidates claims. Always be accurate.
What is the most common reason for a refused claim?+
Failure to meet a stated control, particularly MFA or backups, at the time of the incident.
Is cyber insurance worth it?+
Usually yes, particularly for SMEs that cannot self-insure the downtime cost of a ransomware event. The cover should complement, not replace, the underlying controls.
Next step
Want to talk this through?
Book a free 30 minute consultation. No sales pitch, just clear answers.
Book free consultation