📊 Insurance Questions Extraction Placeholder

STATUS: Awaiting insurance form samples

What's Needed

This placeholder marks where insurance question extraction and mapping will be documented.

Required Inputs

• Allianz cyber insurance application forms
• Chubb cyber insurance forms
• Other major Australian insurer forms
• Renewal vs new application variations

Planned Extraction Process

graph TD
    A[Insurance Forms] --> B[Extract Questions]
    B --> C[Categorize by Domain]
    C --> D[Map to Frameworks]
    D --> E[Tag Risk Patterns]
    E --> F[Unified Question Bank]

Question Tagging Schema

question:
  id: 'ALZ-2024-Q3.2'
  text: 'Does your organization enforce multi-factor authentication for all
    administrative access?'
  metadata:
    insurer: 'Allianz'
    form_version: '2024-cyber-v3'
    form_type: 'renewal'
    section: 'Access Controls'
  mappings:
    frameworks:
      - essential_eight: 'Restrict Administrative Privileges'
      - iso27001: ['9.4.2', 'A.9.4.2']
    risk_patterns:
      - 'no_mfa_admin'
    answer_type: 'boolean'
    evidence_required: true
    impacts_premium: true

Expected Categories

1. Access Controls

2. MFA requirements

3. Privileged access management

4. Password policies

5. Incident Response

6. Response team

7. Recovery procedures

8. Notification processes

9. Data Protection

10. Encryption standards

11. Backup procedures

12. Data classification

13. Third Party Risk

14. Vendor management
15. Supply chain security
16. Outsourcing controls

Integration Points

• Unified Question Bank
• Risk Pattern Framework
• Evidence Collection System
• Premium Impact Calculator

Next Steps

1. Obtain insurance forms
2. Extract and categorize questions
3. Create mapping templates
4. Build import scripts

---

See /docs-internal/docs/00-documentation-meta/outstanding-work-tracker.md for status