CNA Cyber / CyberAssist · US · Cyber, panel model: Incident response + preparedness.
34 providers across 39 documented relationships (recomputed after provider-name canonicalization), assembled from public carrier pages (2 sources, accessed 2026-10-06). 5 of 14 readiness rules are answerable from public panel data; the rest are explicit evidence gaps, not a readiness score.
Geographies observed: US
Core service coverage: 50% across 3 capability groups
39 relationships across 34 unique providers (concentration reviewable)
3 categories have 3+ qualified providers
Provider verification: 0% of providers have documented evidence, publicly absent in this dataset
32% of panel providers have issuer-cited certifications (public tier); registry and contractual verification pending
24x7 provider evidence: advertised claims only, must be contract-verified
SLA evidence: 0% of providers have documented evidence, publicly absent in this dataset
Capacity evidence: 0% of providers have documented evidence, publicly absent in this dataset
Rate governance: negotiated rates and scope are contractual, not public
Requires: Verification/audit log, produced by the VendorQuals platform
Requires: OTIR readiness assessment, produced by the VendorQuals platform
Requires: Historical snapshots, produced by the VendorQuals platform
Requires: OTIR remediation workflow, produced by the VendorQuals platform
| Relationship category | Providers | Relationships |
|---|---|---|
| Digital forensics / incident response | 18 | 18 |
| Breach counsel | 11 | 11 |
| Incident-response readiness / risk mitigation | 10 | 10 |
Relationship types stay distinct, response, loss mitigation, and preparedness are separate categories and are never equated.
Verification, SLA, capacity, credential, and contractual evidence are exactly what the VendorQuals carrier platform produces, the evidence-backed panel adequacy report your regulator will ask for.
Carrier membership →