← All carriers
CARRIER READINESS, PROTOTYPE

AIG Cyber Panel Readiness

CyberEdge · US · Cyber, panel model: Post-incident partners + vendors.

What this is, and is not

43 providers across 46 documented relationships (recomputed after provider-name canonicalization), assembled from public carrier pages (1 source, accessed 2026-10-06). 5 of 14 readiness rules are answerable from public panel data; the rest are explicit evidence gaps, not a readiness score.

43
Unique providers
46
Documented relationships
5
Capability groups
100%
Core service coverage
5
Categories with 3+ providers
100
Panel evidence coverage

Readiness framework, 14 rules

Panel coverage

R-01 · Geographic coverageDoes the carrier have appropriate providers across target territories?
Answered by public dataHigh

Geographies observed: US

R-02 · Service coverageAre required response functions covered: counsel, DFIR, notification, PR, restoration, accounting, etc.?
Answered by public dataHigh

Core service coverage: 100% across 5 capability groups

Panel resilience

R-03 · ConcentrationIs the panel overly dependent on a small number of providers?
Answered by public dataHigh

46 relationships across 43 unique providers (concentration reviewable)

R-04 · Regional redundancyAre there at least 2 qualified alternatives for critical services in each key region?
Answered by public dataHigh

5 categories have 3+ qualified providers

Provider verification

R-05 · Evidence freshnessHow recently were credentials, insurance, certifications, contacts and capabilities verified?
Evidence gapHigh

Provider verification: 0% of providers have documented evidence, publicly absent in this dataset

R-06 · Credential statusAre required credentials/current documentation valid?
Evidence gapHigh

35% of panel providers have issuer-cited certifications (public tier); registry and contractual verification pending

Operational readiness

R-07 · 24/7 responseDoes provider advertise or contract for emergency response?
Answered by public dataMedium

24x7 provider evidence: advertised claims only, must be contract-verified

R-08 · SLADoes provider meet carrier-defined response-time requirements?
Evidence gapHigh

SLA evidence: 0% of providers have documented evidence, publicly absent in this dataset

R-09 · Surge capacityCan provider handle catastrophe/systemic-event volume?
Evidence gapHigh

Capacity evidence: 0% of providers have documented evidence, publicly absent in this dataset

Financial readiness

R-10 · Rate governanceAre negotiated rates/current pricing and scope documented?
Evidence gapHigh

Rate governance: negotiated rates and scope are contractual, not public

Regulatory readiness

R-11 · Evidence trailCan carrier demonstrate why providers were selected and remain suitable?
Requires the VendorQuals platformHigh

Requires: Verification/audit log, produced by the VendorQuals platform

R-12 · Panel adequacyCan carrier produce an evidence-backed panel adequacy report?
Requires the VendorQuals platformHigh

Requires: OTIR readiness assessment, produced by the VendorQuals platform

Change management

R-13 · Panel driftHow many relationships/providers have changed since last review?
Requires the VendorQuals platformMedium

Requires: Historical snapshots, produced by the VendorQuals platform

Remediation

R-14 · Gap closureAre identified gaps assigned, tracked and resolved?
Requires the VendorQuals platformHigh

Requires: OTIR remediation workflow, produced by the VendorQuals platform

Panel composition

Relationship categoryProvidersRelationships
Breach counsel1717
Digital forensics / incident response1616
Notification / post-breach66
PR / crisis communications44
Data restoration33

Relationship types stay distinct, response, loss mitigation, and preparedness are separate categories and are never equated.

Providers (46)

Debevoise & Plimpton LLP
Breach Counsel
DLA Piper
Breach Counsel · on 2 carrier panels in this dataset
Dorsey & Whitney LLP
Breach Counsel
Eversheds Sutherland (US) LLP
Breach Counsel
Holland & Knight LLP
Breach Counsel · on 3 carrier panels in this dataset
Kennedys
Breach Counsel · on 3 carrier panels in this dataset
King & Spalding LLP
Breach Counsel
Mayer Brown LLP
Breach Counsel
McDonald Hopkins LLP
Breach Counsel
Morgan Lewis & Bockius LLP
Breach Counsel
Morrison & Foerster LLP
Breach Counsel
Mullen Coughlin LLC
Breach Counsel · on 5 carrier panels in this dataset
Norton Rose Fulbright U.S. LLP
Breach Counsel · on 6 carrier panels in this dataset
Orrick Herrington & Sutcliffe LLP
Breach Counsel
Ropes & Gray LLP
Breach Counsel
Shook, Hardy & Bacon LLP
Breach Counsel · on 3 carrier panels in this dataset
Troutman Pepper Locke LLP
Breach Counsel
Alvarez & Marsal
Forensics & Investigations
Ankura
Forensics & Investigations · on 5 carrier panels in this dataset
Arete Incident Response
Forensics & Investigations · on 6 carrier panels in this dataset
BlueVoyant
Forensics & Investigations
Booz Allen Hamilton
Forensics & Investigations · on 6 carrier panels in this dataset
Charles River Associates
Forensics & Investigations · on 5 carrier panels in this dataset
CrowdStrike Services
Forensics & Investigations · on 6 carrier panels in this dataset
CYPFER
Forensics & Investigations · on 4 carrier panels in this dataset
KPMG
Forensics & Investigations · on 3 carrier panels in this dataset
Kroll
Forensics & Investigations · on 5 carrier panels in this dataset
LevelBlue
Forensics & Investigations · on 2 carrier panels in this dataset
Mandiant / Google Cloud
Forensics & Investigations · on 5 carrier panels in this dataset
MOXFIVE
Forensics & Investigations · on 5 carrier panels in this dataset
Palo Alto Networks / Unit 42
Forensics & Investigations
Quorum Cyber
Forensics & Investigations · on 2 carrier panels in this dataset
Verizon Cybersecurity
Forensics & Investigations · on 2 carrier panels in this dataset
CYPFER
Data Restoration · on 4 carrier panels in this dataset
Fenix24
Data Restoration · on 4 carrier panels in this dataset
MOXFIVE
Data Restoration · on 5 carrier panels in this dataset
Burson
Crisis Communication
FTI Consulting
Crisis Communication · on 2 carrier panels in this dataset
Jaderoq
Crisis Communication
Leidar USA
Crisis Communication
Epiq Systems
Notification & Post-Breach · on 6 carrier panels in this dataset
Experian
Notification & Post-Breach · on 5 carrier panels in this dataset
IBC Intelligence Business Concepts
Notification & Post-Breach
IDX
Notification & Post-Breach · on 3 carrier panels in this dataset
Kroll
Notification & Post-Breach · on 5 carrier panels in this dataset
TransUnion
Notification & Post-Breach · on 5 carrier panels in this dataset

Sources

AIG U.S. Post-Incident Partners and Vendors (accessed 2026-10-06)
CyberEdge U.S. post-incident partner/vendor PDF

The gaps are the product

Verification, SLA, capacity, credential, and contractual evidence are exactly what the VendorQuals carrier platform produces, the evidence-backed panel adequacy report your regulator will ask for.

Carrier membership →