A3.2: Do you want to opt in to the included cyber insurance?
If you have answered "yes" to the last question, then your organisation is eligible for the included cyber insurance if you gain certification. Would you like to opt in for the included cyber insurance?
Source: IASME Cyber Essentials Danzell question set v16.3
If A3.1 shows you are eligible, A3.2 lets you opt in or out of the cyber liability insurance included with certification. There is no extra cost either way and the choice does not affect the assessment. Opting in means your contact details go to the insurance broker. Check how it sits with any cover you already hold.
Is A3.2 an automatic fail?
No. A3.2 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Opt-in / opt-out a multiple choice question
- IASME guidance
- There is no additional cost for the insurance.
- Requirement enforced
- Not a technical requirement. The included cyber liability insurance is an IASME benefit for eligible UK organisations certifying their whole organisation.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A3.2 ask?
A3.2 asks: “If you have answered "yes" to the last question, then your organisation is eligible for the included cyber insurance if you gain certification. Would you like to opt in for the included cyber insurance?”
A3.2 asks whether, having answered Yes to A3.1, you would like to opt in for the included cyber insurance if you gain certification. The guidance says there is no additional cost for the insurance.
If you opt in, A3.3 asks for the email contact the broker will use. Policy limits and terms are set by the insurer and broker, not by the question set, so check the current details on IASME's website before deciding how the policy fits with your existing cover.
Which option should you choose for A3.2?
Choose the option for A3.2 that is enforced today across the whole scope, and complete the notes wherever the option requires them.
Opt in if you are eligible and want the included policy; it costs nothing extra. Opt out if you already hold cover you prefer and do not want a second policy, or if your existing insurer asks you not to. Neither choice affects the assessment.
What mistakes do applicants make with A3.2?
A common mistake with A3.2: opting in when A3.1 was answered No.
- Opting in without telling an existing insurer, where your policy requires disclosure of other cover.
- Giving a contact in A3.3 that nobody monitors.
- Assuming the policy covers more than it does; read the terms when they arrive.
How do you get A3.2 right?
Work through these steps before you enter A3.2 in the portal:
- Read how the included policy would sit alongside any cyber cover you already hold, and tell your existing insurer if your policy requires it.
- Opt in or out; neither choice changes the price or the result.
How do assessors check A3.2?
Where to go next
Other A3 questions
Frequently asked questions
A3.2 in the 2026 Danzell Cyber Essentials question set asks: "If you have answered "yes" to the last question, then your organisation is eligible for the included cyber insurance if you gain certification. Would you like to opt in for the included cyber insurance?" It is a multiple choice question.
If A3.1 shows you are eligible, A3.2 lets you opt in or out of the cyber liability insurance included with certification. There is no extra cost either way and the choice does not affect the assessment. Opting in means your contact details go to the insurance broker. Check how it sits with any cover you already hold.
No. A3.2 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
It costs nothing extra, so most eligible organisations opt in. Read the policy documents when they arrive and check how they sit alongside any cyber cover you already hold.
Yes. IASME's guidance says you can opt out of the insurance element, and doing so does not change the price of the assessment.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh