Industries

Cyber security for insurance brokers

Managed cyber security for insurance brokers. Protect client data and premium payments, keep insurer portal logins safe, and meet the standards you ask your own clients to meet.

Why insurance brokers are targeted

A broker holds detailed personal and financial information about every client, sometimes including health details for protection cover, plus logins to the insurer portals where policies are placed and changed.

Money moves too. Premiums are paid, claims are settled and refunds go out, often arranged by email. An attacker who gets into a mailbox can redirect payments, or use your firm's name to trick clients who trust you.

What we see

Premium and payment fraud

A criminal in a mailbox sends clients "updated" bank details for a premium, or diverts a claim payment or refund to their own account.

Stolen insurer portal logins

Passwords for insurer and placing platforms are valuable. A stolen login can expose client records or be used to make changes in your name.

Sensitive client data

Personal, financial and sometimes health information on every client. A breach may need reporting to the ICO, and possibly to the FCA.

Ransomware at renewal time

Losing access to your broking system or client files stops renewals and quotes, and attacks are usually launched outside business hours, when nobody is watching.

What clients, insurers and regulators expect

  • The FCA. Under Principle 11, firms must tell the FCA about anything it would reasonably expect notice of. The FCA's guidance on reporting operational incidents says an incident may be material if it results in unauthorised access to your systems, makes them unavailable, or causes a significant loss of data. New, standardised incident reporting rules come into force on 18 March 2027.
  • UK GDPR. Your firm is responsible for the personal data it holds. A breach that puts people at risk must be reported to the ICO within 72 hours of you becoming aware of it.
  • Insurers and networks. The insurers you place business with, and any network you belong to, may ask about your security. Your own professional indemnity and cyber insurers certainly will.
  • Your clients. You may be advising clients on cyber insurance and the controls insurers expect. Meeting those standards yourself makes the advice more credible.
What we recommend

Protection for insurance brokers

From£4

Email security

Filters impersonation, payment fraud attempts and malicious attachments out of your mailboxes before your team sees them.

Per user, per month, excluding VAT.

More details
From£8

Identity threat detection (ITDR)

Spots stolen passwords and suspicious Microsoft 365 sign-ins, the usual first step before payment fraud.

Per user, per month, excluding VAT.

More details
From£13

24/7 managed detection & response (MDR)

A 24/7 team watching your devices and systems, including evenings and weekends, and stepping in to contain an attack.

Per user, per month, excluding VAT.

More details
From£4

Phishing simulation & training

Practice phishing emails and short training, so your team spots the real thing in the middle of a busy renewal season.

Per user, per month, excluding VAT.

More details
From£3

Mobile device management

Keeps client data on staff phones under control, and removes it if a phone is lost or someone leaves.

Per user, per month, excluding VAT.

More details

Business email compromise

If a mailbox is compromised, we lock the attacker out, find out what they saw and help you contact the right people quickly.

More details

How we work with brokers

A typical small brokerage has between 10 and 50 people, an IT provider or a broking software supplier for day-to-day support, and nobody whose job is security. That's the gap we fill.

We start with a conversation about how your firm works: where client data lives, how premiums and claims are paid, which systems your team logs into, and what your own insurer asks for. Then we recommend the protection that fits, with prices up front. Everything runs from one platform with one monthly invoice, and you can add to it as you grow.

Questions
If it's material, yes. The FCA expects to hear about incidents that, for example, give someone unauthorised access to your systems, make them unavailable or cause a significant loss of data. A personal data breach is reported to the ICO separately. Our guide, Do we need to report a cyber attack?, covers the ICO side.
Usually yes, and the two work well together. Your IT provider looks after users, software and hardware. We supply and manage the security: the protection itself and the 24/7 monitoring behind it.
Our 24/7 MDR starts at £13 per user per month, so from £195 a month for 15 people, excluding VAT. Email security and the other controls are priced per user too. Use the price calculator for your own numbers.

Not sure what you need?

Tell us a little about your business and we'll recommend the controls that will work best for you, with no obligation and no jargon.

Our experts spent 20 years at Sophos and include a certified ethical hacker.
More about us

Get Protected Ask a question