What a 2026 cyber-insurance carrier actually asks on the renewal application.

For most of the last decade, the cyber-insurance application was an attestation exercise. The applicant said yes or no to a few control questions and signed. The underwriter priced the renewal on the answers. The follow-up calls were rare.

That has changed. For the 2026 renewal cycle, every major commercial cyber carrier — Travelers, AIG, Beazley, Chubb, Coalition, Hartford — has hardened the hardware-inventory section of the application. The shift is concrete: from “do you maintain an inventory” to “what is the date on your last hardware inventory, who produced it, and can you show it to us.” The yes-or-no attestation is no longer enough. The carrier wants a document.

Five questions, named and dated

The questions vary in wording but converge in substance. The five recurring asks across the 2026 forms:

1. Do you maintain a current inventory of all hardware assets connected to your network?
   What the carrier expects: a document dated within the last 90 days. The signed monthly CybrIQ inventory export with a SHA-256 hash satisfies this. The asset register in ServiceNow CMDB satisfies it only if the underwriter doesn't ask about completeness, which they will.
2. How is the inventory produced and how often is it refreshed?
   What the carrier expects: the source system named (not “manual reconciliation”), the cadence specified, and ideally a continuous-monitoring shape. “CybrIQ Layer-1 device identification, polled every 30 seconds, signed monthly export at the control plane” is the answer.
3. How are unauthorized devices detected and what is the time-to-detect?
   What the carrier expects: a stated cadence and an evidence trail. “Unauthorized devices are detected within one polling interval (default 30 seconds), logged to the deviation log, routed to the NAC for quarantine, and exported as part of the monthly inventory.”
4. How do you handle OT, IoT, and unmanaged endpoints?
   What the carrier expects: evidence that the inventory covers devices the EDR cannot reach. Conference-room AV, building automation, vendor-supplied operational gear, IoT sensors, lab equipment. The Layer-1 read sees all of these; the manufacturer-API-only monitoring does not.
5. Is any of your hardware sourced from entities prohibited under NDAA Section 889 or otherwise flagged on US Entity List / BIS lists?
   What the carrier expects: an honest answer with evidence. “Continuous matching against the covered-entity reference library; covered hardware identified by Layer-1 fingerprint even where the shipping label has been changed.”

Where Utelogy contributes to the answer

Utelogy answers a different but adjacent question: the continuous-monitoring shape of the AV and UC estate. Carriers are also hardening the operational-monitoring section. “Do you continuously monitor the operational health of the systems your employees use to conduct business?” is on the 2026 application. Utelyze answers that one directly with the live device health, MTTR posture, and self-healing automation evidence.

The pair effect: the operational-monitoring answer (Utelogy) and the device-inventory answer (CybrIQ) sit in adjacent boxes on the same application, and the carrier can verify both are continuous, both are dated within the renewal window, and both are evidenced by signed exports rather than vendor claims.

What the carrier does with the answers

Premium movement at renewal is the obvious lever. The less obvious lever is policy retention. Carriers have been non-renewing accounts where the hardware-inventory answer is “ServiceNow CMDB” and the follow-up evidence does not survive ten minutes of scrutiny. The shift to documented continuous-monitoring evidence is not just about a discount; it is about whether the carrier offers renewal terms at all.

The honest part

Exact premium movement depends on claims history, the underwriter's portfolio, and the broader controls package. CybrIQ does not produce a 25% renewal discount on its own. What it produces is the artifact the carrier requires to keep the conversation moving and to support the broader controls answer set. The math in the combined calculator uses a conservative 5% premium-savings assumption against the current annual premium; some accounts see more, some see less, and an account in a hard-claims year may see no movement at all.

If you take one thing away

The five questions above are on the 2026 renewal application of every major commercial cyber carrier. The vendor language and exact wording differ; the substance does not. If your current hardware-inventory answer cannot survive a phone call with the underwriter, this is the conversation worth having before the renewal window closes.