Title

text name

text name

text name

text name

Title

text name

text name

text name

text name

August 2026 Newsletter

Your-Cyber-Insurance-Renewal-Is-Asking-Harder-Questions

Cyber insurance applications are not as simple as they used to be.

Many businesses are seeing longer renewal forms, more detailed questions, and less room for vague answers. Carriers want to know exactly what protections are in place before they agree to renew coverage.

That does not mean every business needs to panic. It does mean the answers on the application need to match reality.

The risk is not just a higher premium. If a business says a control is in place and a claim later shows it was not, the carrier may challenge the claim or even attempt to void the policy.

Why the Questions Have Changed

Cyber insurance carriers have paid expensive claims tied to ransomware, wire fraud, vendor breaches, and business email compromise. In response, they are asking more specific questions about the controls that could have limited those losses.

Older applications may have asked broad questions like, “Do you use MFA?” or “Do you back up your data?”

Now, the questions go deeper.

Is MFA required for email, VPN, remote access, admin accounts, and critical systems? Are backups immutable or air-gapped? Are wire transfers verified through a known phone number? Is endpoint detection monitored around the clock? Have incident response plans been tested?

A simple yes is not enough if the details do not support it.

Before You Turn On Copilot, Check Who Can See What

Microsoft Copilot can make it much easier for employees to find, summarize, and connect information across Microsoft 365.

That is exactly why permissions matter.

Copilot does not create new access. It works with the access employees already have. If someone can see an old SharePoint folder, broadly shared file, Teams channel, meeting transcript, or email thread, Copilot may be able to use that information in its responses.

Before rolling out Copilot, check these essentials:

Before-You-Turn-On-Copilot-Check-Who-Can-See-What

Review Shared Files
Look for SharePoint and OneDrive files that are shared too broadly, externally, or through old “anyone with the link” permissions.

Clean Up Teams Access
Remove employees, former team members, and outside users who no longer need access to specific Teams or channels.

Protect Sensitive Information
Make sure HR, finance, legal, client, and leadership files are limited to the right people.

Check Old Permissions
Review access employees may have accumulated from previous roles, projects, departments, or client work.

Choose Pilot Users Carefully
Executives and managers often have the broadest access, so even a small Copilot pilot should begin with a permissions review.

Copilot can make the information inside Microsoft 365 dramatically easier to find. Before turning it on, make sure employees can only find what they are supposed to see.

A little Microsoft 365 housekeeping now can prevent some very uncomfortable surprises later.

Fake MyChart ScamsCatch of the Month:
Fake MyChart Messages

Scammers are sending fake MyChart emails and text messages designed to steal passwords and personal information. The messages may look like legitimate healthcare notifications and use the MyChart name or logo to make them more convincing.

Some scams advertise a free “MyChart Medicare Kit,” “Senior Health Package,” or other free service in exchange for personal information. Others may tell patients that test results are ready and direct them to a fake MyChart login page designed to capture their username and password. MyChart has confirmed that it does not run giveaways.

These scams are especially effective because patients are already used to receiving appointment reminders, test result notifications, billing updates, and other healthcare messages by email or text. A fake notification can easily blend in with legitimate communication.

How to Stay Safe:

Do not click a link in an unexpected MyChart email or text. Instead, open the MyChart app directly or go to your healthcare provider’s official website and log in from there.

Check the sender’s email address, phone number, and website address carefully. Small spelling changes, unfamiliar domains, unexpected offers, or requests for passwords and verification codes are warning signs.

MyChart and your healthcare organization will not ask you to provide your password or verification code by phone, text, or email. Those credentials should only be entered through the official MyChart website or app.

If you already entered your password through a suspicious link, change your MyChart password immediately, review the contact information connected to your account, and contact your healthcare organization’s help desk.

When a healthcare message catches you off guard, do not let urgency make the decision for you. Open the app yourself, verify the message independently, and keep your login information private.

MVP University Logo

Upcoming & Past Events

RSVP Today!

Brunch, Business & AI Breaches

Join MVP Network Consulting for a practical conversation about how AI is changing cyber threats, where hidden security gaps may exist, and what businesses can do now to better protect their data before a risk turns into a breach.

Wednesday, September 23rd, 2026
from 8:30-10:00 AM 

Buffalo Club
Mary Jane Pratt Room
388 Delaware Ave, Buffalo, NY 14202

The 6-Month Roadmap to AI Efficiency-1

The 6-Month Roadmap to AI Efficiency

 Access the recording of MVP Network Consulting’s webinar for a practical conversation on how business leaders can move beyond AI experimentation and start building a more secure, strategic plan for using AI to create real efficiency across their organization. 

Fraud Event 2026

Uncorking AI: A Safe & Smart Path to AI Adoption

This presentation gives businesses practical, real-world guidance for safely deploying AI across their technology, infrastructure, policies, and day-to-day processes. Learn how to put the right safeguards in place while supporting secure, productive AI adoption. 

MVP In The Community

MVP Network Consulting recently completed its SOC 2 Type II examination, marking an important milestone for the team and the clients they serve across Western New York. The independent review confirms that MVP’s security controls are not only documented, but consistently followed over time. For a company that helps businesses strengthen their technology and cybersecurity every day, completing SOC 2 Type II reflects the same commitment to accountability, trust, and continuous improvement that MVP brings to its client relationships. 

 

MVP Network Consulting Completes SOC 2 Type II Examination

Request Your AI Discovery Call to See Where Your Business Stands with AI