- Home
- Industries
- Insurance
Secure your own house,
and your policyholders' worst day.
Insurers and brokers hold some of the most detailed personal and financial data in the country, and answer to OSFI, the AMF and provincial regulators. Cyber insurers also need a responder who documents everything. We do both, around the clock.
Where insurers and brokers get hit.
Rich data, many intermediaries and payments that move on instruction.
Policyholder data theft
Claims files hold health, financial and identity records in one place. Attackers steal them for extortion and fraud, often before any encryption.
Ransomware and extortion
Operators know an insurer cannot stop paying claims or quoting business. They target core policy and claims systems for maximum pressure.
Claims and payment fraud
Attackers take over adjuster, broker or vendor mailboxes and redirect claim payments or commission transfers.
Broker and agency networks
Brokers and managing general agents connect to carrier portals with varied security. One weak intermediary can open a path to the carrier.
Third-party and cloud platforms
Policy administration, claims and rating platforms often run with vendors. OSFI expects you to manage that risk, not outsource it.
AI in underwriting and claims
Models and AI agents now touch policyholder data and decisions. Unmonitored, they can leak data or be manipulated.
The frameworks you report against.
Federal and provincial insurance regulators first, then privacy law, then the US rules that apply when you write business there.
| Framework | Who it applies to | What we help with |
|---|---|---|
| OSFI Guideline B-13, technology and cyber risk | Federally regulated insurers | Gap assessment against B-13, 24/7 detection and response, and the testing evidence the guideline expects |
| OSFI Guideline B-10, third-party risk | Federally regulated insurers | Vendor risk tiering, technical assessment of critical suppliers, and monitoring of third-party access |
| OSFI technology and cyber security incident reporting | Federally regulated insurers | Fast triage and scoping so incidents are reported to OSFI accurately and within 24 hours |
| AMF information security incident regulation and ICT risk management guideline (Quebec) | Insurers authorized in Quebec | Incident management policy and procedures, detection and response, and the incident facts the AMF expects |
| FSRA IT Risk Management Guidance (Ontario) | Ontario-incorporated insurers and reciprocals | Mapping your programme to FSRA's IT risk practices, and incident scoping to support timely notice to FSRA |
| Other provincial insurance regulators, such as BCFSA | Provincially incorporated insurers and licensed intermediaries | Mapping your programme to provincial expectations and building the evidence for examinations |
| PIPEDA, Alberta and BC PIPA, and Quebec Law 25 | Insurers and brokers handling personal information of Canadians and Quebec residents | Breach investigation, harm assessment support and documented incident records |
| NYDFS Cybersecurity Regulation (23 NYCRR Part 500) | Insurers licensed in New York | Risk assessment, penetration testing, incident response planning and the evidence for annual certification |
Working alongside insurers on claims.
Incident response for policyholders
When a policyholder is hit, we contain, investigate and recover, and coordinate with the insurer and breach coach from the first call.
Claim-ready evidence
Evidence preserved to forensic standard, with a documented timeline of containment, remediation and recovery that adjusters and counsel can rely on.
Underwriting and renewal support
We help applicants answer security questionnaires accurately and close the control gaps behind a refusal. See cyber insurance support.
How we help insurers and brokers.
MSOC
An autonomous SOC that detects and contains threats in under two minutes, around the clock, with senior analysts on top.
Learn more →Incident response
NIST-aligned response for your own environment or your policyholders', with evidence handled to a court standard from the first call.
Learn more →Cyber insurance support
Accurate questionnaires, closed control gaps and, after an incident, the forensic evidence and timeline a claim needs.
Learn more →ForsetiGRC & compliance
Ongoing control management and evidence for OSFI, the AMF and provincial regulators, kept current between reviews.
Learn more →Supply chain & third-party risk
A B-10 aligned vendor programme: tiering, technical assessment and monitoring of critical suppliers and intermediaries.
Learn more →BifrostDigital forensics
What was taken, by whom and when, documented to a standard insurers, regulators and courts accept.
Learn more →What buyers ask.
We are a cyber insurer. Can you respond for our policyholders?
Yes. We work alongside insurers and breach coaches on claims: senior responders contain and investigate, and every action is documented so the claim has the evidence and timeline it needs.
Will you negotiate with attackers on a ransomware claim?
Yes, when it helps. Our responders negotiate with threat actors after identification and sanctions screening, to buy time, gather intelligence and protect options while we contain and recover. We never recommend paying a ransom.
Can you help us prepare for an OSFI or AMF review?
Yes. We assess you against B-13, B-10 and the AMF's expectations, close the gaps with you, and keep the evidence current through Forseti so the next review is not a scramble.
Where does policyholder data live?
100% Canadian-owned, with primary operations in Canada. We deploy to meet each client's data-residency requirements, and Canadian clients' data stays in Canada.
Talk to someone who knows insurance.
Put a specialist on a call to scope monitoring, OSFI readiness or claims response. No charge, no commitment.