A3.3: Which email address should receive the insurance documents?
What is the organisation email contact for the insurance documents? You only need to answer this question if you are taking the insurance.
Source: IASME Cyber Essentials Danzell question set v16.3
A3.3 needs the organisation email address that the insurance broker will use to send your policy documents and renewal information. Answer it only if you opted in at A3.2. Use a shared mailbox that someone monitors, such as accounts@ or admin@, rather than an individual who might leave before the policy renews.
Is A3.3 an automatic fail?
No. A3.3 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
- Answer type
- Notes a notes question, answered in free text
- IASME guidance
- The answer to this question will be passed to the Insurance Broker in association with the Cyber Insurance you will receive at certification and they will use this to contact you with your insurance documents and renewal information.
- Requirement enforced
- Not a technical requirement. The included cyber liability insurance is an IASME benefit for eligible UK organisations certifying their whole organisation.
- Outcome if non-compliant
- Not marked against a requirement; inaccurate details may be returned for correction
What does A3.3 ask?
A3.3 asks: “What is the organisation email contact for the insurance documents? You only need to answer this question if you are taking the insurance.”
A3.3 asks for the organisation email contact for the insurance documents, and says you only need to answer if you are taking the insurance. The guidance explains that the answer is passed to the insurance broker, who will use it to contact you with your insurance documents and renewal information.
IASME also asks that the insurance information is as accurate as possible and that the assessment declaration is signed at board level or equivalent, to avoid delays to the policy being issued.
What should you write in the notes field for A3.3?
Write two to four specific sentences for A3.3: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
[insurance@ / accounts@ / admin@yourdomain.co.uk], monitored by [role]
What mistakes do applicants make with A3.3?
A common mistake with A3.3: giving a personal mailbox that leaves with the person.
- A typo, so the policy documents never arrive.
- An address on a domain you are retiring.
- Answering when you opted out at A3.2.
How do you get A3.3 right?
Work through these steps before you enter A3.3 in the portal:
- Give a shared organisational mailbox that someone monitors, and check the spelling.
How do assessors check A3.3?
Where to go next
Other A3 questions
- A3.1A3.1Yes/NoIs your head office domiciled in the UK or Crown Dependencies and is your gross annual turnover less than £20m?Yes/No
- A3.2A3.2Opt-in / opt-outIf you have answered "yes" to the last question, then your organisation is eligible for the included cyber insurance if you gain certification. Would you like to opt in for the included cyber insuran…Opt-in / opt-out
Frequently asked questions
A3.3 in the 2026 Danzell Cyber Essentials question set asks: "What is the organisation email contact for the insurance documents? You only need to answer this question if you are taking the insurance." It is a notes question, answered in free text.
A3.3 needs the organisation email address that the insurance broker will use to send your policy documents and renewal information. Answer it only if you opted in at A3.2. Use a shared mailbox that someone monitors, such as accounts@ or admin@, rather than an individual who might leave before the policy renews.
No. A3.3 records information about your organisation and is not marked against a technical requirement, so no answer to it fails the assessment. Inaccurate or contradictory details may be returned by the assessor for correction.
The insurance broker associated with the included cyber insurance, who uses it to send policy documents and renewal information.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh