As part of its fourth insurance stress testing exercise launched on 14 May 2018, the European Insurance and Occupational Pensions Authority (EIOPA) has included for the first time a ‘cyber questionnaire’ for its target group of participants to complete. This paper discusses what information firms have been asked to disclose and how the questionnaire might be used by firms outside of EIOPA’s target group.