Industry Insurance

Cyber Risk & Security Platform

Insurance

Protect policyholder data, critical services, people and the third parties your insurance business depends on.

Insurance businesses are built on trust, information and availability. Policyholders expect their data to be protected, brokers and partners expect systems to be accessible, and operational teams need technology to keep underwriting, servicing policies, processing claims and communicating with customers.

At the same time, the insurance ecosystem is highly connected. Insurers can depend on brokers, MGAs, claims providers, cloud platforms, software vendors, data providers and outsourced services. Cyber risk therefore extends beyond the organisation’s own network.

ConnectProtect brings cyber risk visibility and managed security together, helping insurance organisations understand what is exposed, monitor selected third parties, protect endpoints, detect suspicious activity and prioritise vulnerabilities.

Your insurance technology environment
is bigger than your network

Cyber risk can exist across your organisation and the technology used, including:

Websites, domains, APIs and internet-facing services
Remote access and privileged administration
Data, analytics and specialist insurance technology
Brokers, MGAs, TPAs and outsourced service providers
Software and infrastructure vulnerabilities

Know how you're exposed

The insurance cyber security challenges we help you address

A cyber incident can affect more than systems. It can interrupt claims, prevent access to policy information, disrupt customer communication, expose sensitive information and put pressure on operational teams when customers may already need support.

Protect the services policy holders rely on

Important insurance services depend on people, processes, technology and information working together. Security visibility and monitoring help organisations identify suspicious activity while vulnerability management helps teams focus on weaknesses that deserve attention.

Protect sensitive policyholder and commercial information

Insurers, brokers and intermediaries can hold personal, financial, claims, medical and commercial information. Endpoint protection and managed monitoring help strengthen the security around the users and devices accessing that information.

Choose the right product

Know what is visible
from the internet

Customer portals, broker services, domains, APIs, cloud infrastructure and remote-access services can create an external footprint that changes as the business evolves.

ConnectProtect^® Horizon

Horizon provides Managed External Attack Surface Management (EASM), giving your organisation an outside-in view of what is visible from the internet.

Identify externally visible assets
Track changes to the external attack surface
Surface potential security issues
Prioritise findings for investigation
Understand what an external observer can see

Third parties are part of insurance cyber risk

Insurance organisations often operate through an ecosystem of technology and service providers. Cloud platforms, claims administrators, software providers, brokers, MGAs, data services, outsourced operations and specialist suppliers can all become dependencies.

That matters because disruption or compromise at a third party can still affect your customers, your operations and your ability to deliver important business services.

ConnectProtect^® Realm

Realm provides continuous third-party cyber risk monitoring for selected suppliers and thirdparties, helping maintain visibility between formal reviews.

Monitor selected critical suppliers
Identify changes in external security posture
Prioritise third parties that need attention
Support supplier and procurement conversations
Add ongoing visibility between periodic assessments
Focus monitoring on dependencies that matter most

Protect the endpoints where insurance work happens

Underwriters, claims teams, brokers, finance, operations and support functions all rely on endpoints to reach important information and systems. Hybrid and remote working can extend that access beyond traditional offices.

ConnectProtect^® Core

Core is a combination of security technology and people watching for threats – without your charity having to build its own security operations centre.

Core is managed endpoint security with:

Antivirus
EDR
anti-ransomware protection
24x7x365 human SOC monitoring

Identify vulnerabilities, prioritise them and track progress.

Managed detection without building everything internally

Insurance organisations may already have security technology, an internal IT team, an MSP or a combination of providers. The challenge is making sure security signals are monitored and investigated consistently — including outside normal working hours.

ConnectProtect^® Unity

Unity is Managed Detection and Response (MDR) that connects supported security
technologies and adds 24x7x365 managed monitoring, investigation and response.

Where supported, Unity can work with technology already in place rather than forcing unnecessary replacement.
Your people focus on the cause. Security specialists help watch the signals.

Four connected questions for charity cyber security

Good cyber security does not have to mean dozens of disconnected tools. ConnectProtect
brings five complementary capabilities together around questions trustees, leaders and IT
teams should be able to answer.

ConnectProtect^® Horizon

What can an attacker see?
Understand your external attack surface.
ConnectProtect^® Realm

Which suppliers could introduce risk?
Monitor selected third parties.
ConnectProtect^® Core

Are your endpoints protected and watched?
Add managed endpoint protection and 24x7x365 human monitoring.
ConnectProtect^® Unity

Would we detect suspicious security activity?
Connect supported security technologies and add managed detection and response

Protect trust across the insurance lifecycle

A policyholder may interact with an insurer at some of the most important or difficult moments in their life or business. They expect the insurer, broker or claims provider to be available and to handle their information responsibly.

Cyber security supports that trust across quoting, underwriting, policy servicing, claims and renewal. It also helps insurance organisations demonstrate a more structured approach when regulators, partners, customers and procurement teams ask how cyber risk is managed.

Cyber security that supports operational resilience

For UK financial firms in scope of the FCA’s operational resilience rules, the FCA says firms had until 31 March 2025 to ensure they could remain within impact tolerances for important business services. Its guidance emphasises understanding the people, processes, technology, facilities, information and third-party dependencies required to deliver those services.

For PRA-regulated insurers, PRA material also addresses operational resilience and outsourcing and third-party risk management. In March 2026, the FCA and PRA finalised new operational incident and material third-party reporting requirements that take effect on 18 March 2027 for firms in scope.

ConnectProtect does not replace FCA or PRA requirements, operational-resilience governance, regulatory reporting or an insurer’s own risk-management responsibilities. Its services can support practical cyber capabilities around visibility, endpoint protection, security monitoring, third-party cyber risk and vulnerability management.

Read the FCA operational resilience guidance, FCA reporting rules and PRA policy statement.

Know what your industry needs.

Pick the right product for your business. With the help of ConnectProtect, we can make cyber security simple and protect you from the threats of today and tomrrow.