Financial Protection Eligibility

Last updated: March 18, 2026

Territorial Availability

Any of the available Cork financial protection packages for purchase are eligible to be resold to end clients located in the following:

  • All 50 states and territories of United States

  • Most Canadian provinces* including:

    • Ontario

    • Nova Scotia

    • New Brunswick

    • Manitoba

    • Prince Edward Island

    • Saskatchewan

    • Alberta

    • Newfoundland and Labrador

*Quebec and British Columbia are currently not eligible for resale

Software Requirements

 Integration Category

Connection Required

Attested

RMM

✅

 

EDR

✅ or observed via RMM

 

Backup₁ on critical endpoints

 

✅

Cloud-based email

 

✅

Multi-factor authentication₂

 

✅

Email security

 

 

Security awareness training₃

*⃣

*⃣

SaaS Backup₄

 

 

PSA

 

 

  1. Any server, laptop, or desktop containing critical data. There are no specific requirements for backup format or offsite storage location - only that they are taken on a regular basis. SaaS backups are not required for financial protection coverage.

  2. Required for email, RDP, and VPN when applicable in a client's environment

  3. SMS Phishing Coverage requires a Security Awareness Training tool to be in place at time of incident.

  4. SaaS Backup is currently a visibility-only layer, there are no compliance events associated with its connection or backup successes.

Compliance Event Impact on Financial Protection Payout

When a compliance event is created, the MSP/MSSP has a specific timeframe to resolve the event before financial protection payout may be affected. This timeframe is known as the risk deadline. The following outlines the risk deadlines by which compliance events must be resolved. Failure to meet these deadlines may result in financial protection payout being affected for the given endpoint or user.

A single asset's compliance event that has lapsed its risk deadline does not void or pause the financial protection for the entire client.

Event Type

Risk Deadline

Endpoint not monitored by RMM

48 hours

Endpoint not protected by EDR

48 hours

Endpoint is not protected by BCDR

72 hours

User has MFA disabled

24 hours

Inbox is not covered by Email Security

24 hours

User does not meet security awareness requirements

No cure period

Insecure mail forward rule

No cure period

Insecure email configuration

7 days

Cork reserves the right to notify MSPs of a major vulnerability that would need to be resolved sooner across the above events.