Cybersecurity Services in Simcoe County That Hold Up on a Cyber Insurance Application
ACT360 provides cybersecurity services across Simcoe County’s 16 municipalities, Barrie and Orillia, putting in place and documenting the controls cyber insurers ask about, such as MFA, tested backups, endpoint protection and an incident plan.
Two towns in this county learned what an attack costs in 2018, and one of them bought cyber insurance because of the other. This page is about getting your business to the point where an insurance form, or a real incident, does not catch you off guard. The service itself is described on our cybersecurity services for Ontario businesses page, and our other county services are listed under IT services in Simcoe County.
FREE · 30 MIN · NO OBLIGATION
What We Check on a 30-Minute Insurance-Readiness Call
Half an hour with an ACT360 partner, ideally with your renewal form or last year’s questionnaire on hand.
- Which questions on the form you could honestly answer yes to today
- Where a yes would need evidence you don’t have yet
- Roughly what closing the gaps would cost before renewal
What Did Wasaga Beach and Midland Learn From Ransomware?
That the ransom is the smallest part of the bill. Wasaga Beach’s 2018 attack cost about $35,000 in bitcoin but more than $250,000 once recovery and staff time were counted, and Midland bought cyber insurance after watching it happen.
According to a town staff report covered by Global News, Wasaga Beach’s systems were compromised on April 30, 2018. The town paid three bitcoins, about $34,950, to unlock four servers, then spent roughly seven weeks rebuilding with outside experts. Direct costs came to $88,347. Adding staff overtime and lost productivity took the total to $251,759.
Midland was hit on September 1 of the same year. It paid eight bitcoins in the end, two more than first demanded, after some decryption keys never arrived. What softened the blow was a cyber policy the town had bought after Wasaga’s attack, with up to $2 million in coverage. Even so, its staff report noted that security improvements and hardware upgrades were not covered by insurance.
Those were municipalities with IT staff and budgets. A 20-person manufacturer in New Tecumseth or a dental office in Collingwood has less of both. Insurance applications now ask pointed questions about MFA, backups and incident response before quoting, and our guide to cyber insurance requirements in Ontario walks through what underwriters typically want to see. ACT360’s own published averages put ransomware recovery at around $200,000, which is the number a policy, and the controls behind it, are meant to protect.
What ACT360 Puts Behind Each Yes on Your Insurance Form
MFA on Every Account That Matters
Email, remote access, banking and admin accounts, with a list showing which are covered and which are next.
Backups an Underwriter Would Accept
Copies kept offline or separate from your network, with restore tests recorded so you can show the date and the result.
Endpoint Detection on Every Device
Laptops, desktops and servers at each of your locations monitored for suspicious activity, not only at head office.
Patching You Can Prove
Updates applied on a schedule, with a report showing which devices are current and which are not.
An Incident Response Plan on Paper
Who to call and in what order, including your broker and your insurer’s breach line, written before you need it.
Staff Training With Records
Phishing awareness sessions and simulated tests, logged by date, because the form will ask.
Common Cyber Insurance Questions and What a Defensible Answer Looks Like
Every insurer’s form is worded differently, so treat this as a typical pattern rather than any one company’s checklist.
An inaccurate answer can put a future claim at risk, so we’d rather you answer honestly and close the gap. Coverage and premiums are always the insurer’s decision.
How ACT360 Keeps County-Wide Security Work Predictable
Financial
Security work is quoted in writing once the free call shows the gaps. The 90-day exit clause belongs to ACT360’s Managed IT agreements, so it applies only if you choose a managed plan.
Switching
Your current setup is documented first. The fixes your renewal depends on go in before anything cosmetic.
Political
Findings come as a short written report you can pass to your broker, your partners or your board.
Operational
Whether you’re in Alliston, Midland or Bradford West Gwillimbury, the same named contact handles your account.
Ownership
Policies, logs, test results and admin access belong to your business and leave with you.
Our Approach
A.C.T.I.O.N.
An insurance form is a list of questions. ACTION makes sure the answers are true for how your business actually runs, wherever in the county it operates.
Assess
We go through your current controls against the questions insurers typically ask, location by location if you run more than one.
Comprehend
We find out what your broker, your largest customers and any regulator expect, and when your renewal falls.
Tailor
A written plan puts the gaps that could affect coverage first, with costs, and says plainly what can wait.
Implement
Fixes go in by phase, timed so the evidence exists before the renewal form is due.
Optimize
Before each renewal we review what changed, from new staff to a new site, and bring the documentation up to date.
Nurture
We work with the office manager or controller who usually fills in the form, so they’re never left guessing.
The Partners Behind Your Security Paperwork
Two partners carry every Simcoe County security account. You speak with them directly, not through a queue.
Adam Bowles
Partner & CEOAdam has spent more than 15 years helping Ontario businesses get the technology they actually need instead of the technology they were sold. He listens first and recommends second.
Jeffrey Bowles
Partner & Director of IT ServicesOne of ACT360’s founding team members, with computer science training from Georgian College. Jeffrey leads helpdesk, networking and cybersecurity at ACT360, along with the vCIO and DEEP MSP programs.
Our Team Values
The six values behind how ACT360 works, from Be the Client to Always Looking Forward, are set out on our About page.
Bring your insurance renewal form to a free 30-minute call and see which answers need work
Get an IT Readiness AssessmentCyber Insurance and Security Questions From Across Simcoe County
Insurers increasingly ask about MFA, backups, endpoint protection and training before they quote, and those answers become part of your application. If a claim follows, the insurer can compare what you said with what was actually in place. Coverage and premiums stay the insurer’s decision, but accurate answers protect you either way.
Wasaga Beach put its 2018 total at $251,759, including staff overtime and lost productivity, against a ransom of about $34,950. Midland paid eight bitcoins after its September 2018 attack and leaned on a cyber policy for most costs, though security upgrades and new hardware were not covered.
Insurance pays for part of the damage after an attack. It doesn’t stop one, restore your files, or fix the systems that let it happen, which is the gap Midland’s own staff report pointed to.
Usually it is enough to close the most common gaps, such as MFA on every account and a tested backup, which often take days rather than weeks. A full set of documented controls takes longer and rolls out in phases. Book the review as soon as the form arrives, so the urgent items get done first.
It’s priced after the free call, based on users, devices, locations and the gaps we find. Ongoing security delivered through ACT360 Managed IT falls within $80 to $150 CAD per user per month, plus Microsoft licensing, while one-off fixes are quoted in writing. Compare that with ACT360’s published average of about $200,000 for ransomware recovery.
Law firms get the same controls with tighter documentation, because privileged files and trust accounts raise the stakes. Our page on IT support for Simcoe County law firms covers the extra requirements.
Not much for security work, since monitoring, patching and log review happen remotely wherever your office is. When an incident or a hardware job needs someone on site, a visit from 24 Maple Ave in Barrie gets arranged. The free 30-minute IT Readiness Assessment is the place to start.
More ACT360 Services Across Simcoe County
Could You Answer Every Question on Your Cyber Insurance Form Honestly?
Book a free 30-minute IT Readiness Assessment before your next renewal.
Get an IT Readiness AssessmentGet in Touch
Phone Number
Building Address
By Appointment only: 24 Maple Ave, Barrie, Ontario
Business Hours
Monday-Friday: 9am to 6pm
Saturday-Sunday: Closed
Request your free assessment
Tell us a little about your business and what prompted the change.
No obligation. We reply within one business day.
Trusted by:
Book Your Free 30-Minute IT Readiness Assessment
Leave your details and a local ACT360 teammate will call you back within one business day to book it. No obligation.