While the requirements for cyber insurance can vary between insurance providers, many policies do recommend or require a penetration test as part of the underwriting process. Penetration testing helps insurance companies assess the security posture of the organisation seeking coverage and determine the level of risk involved.