5 Things Every 2026 Cyber-Insurance Policy Now Requires (And How to Check Yours)

This article describes five key 2026 changes to Canadian cyber-insurance policies — mandatory minimum security controls, ransomware-specific sub-limits, backup architecture and testing requirements, required use of approved incident-response firms, and social-engineering/BEC carve-outs — and provides practical checks and remediation steps for policyholders and brokers to verify coverage and readiness.