Virtual private network (VPN)
In one sentence
An encrypted tunnel that lets remote workers reach company systems securely over the internet.
A VPN creates a protected connection between a remote device and your network, so traffic isn't exposed on public networks. Remote access should require MFA even through a VPN.
Why it's on your cyber insurance application
Remote access is a named application question. Carriers want to know every path into your network from outside, including the one your IT provider uses, and whether MFA covers each of them.
What this looks like in practice
A VPN without MFA is a password away from being an attacker's front door, and that's exactly how several of the losses carriers price for began. Whatever product you use, the remote-access question is really two: can people reach the network from outside, and does that path require a second factor. Both answers go on the form.
How the Readiness Check scores it
The free Check asks the same question a carrier will. Here it is, why it's asked, and the fix if today's honest answer is no. The full application question list has the rest.
MFA & identity
Is MFA required for remote access (VPN, remote desktop) and administrator accounts?
Why carriers ask: Stolen credentials are the most common way attackers get in. Nearly every carrier now requires MFA on email, remote access, and admin accounts as a condition of coverage.
If the answer is no: Inventory every remote entry point (VPN, RDP, remote-support tools) and privileged account; enforce MFA on each or shut it off.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.