Cyber-insurance policies are priced on attestations — statements the insured organization makes about the security controls it has in place, such as MFA on every privileged and remote-access account. This simulator lets you set an organization's real MFA posture account by account, separately from what was attested on the insurance application, file that attestation as the policy's basis, and then trigger a breach against a chosen account. A post-breach investigation compares what actually happened against what was promised: an attested control that turns out to be missing on the breached account triggers a denied claim for material misrepresentation, while an accurate attestation — full coverage or an honestly disclosed gap — keeps the claim on track to be paid.