Insurers Face the Same Cyber Threats They Underwrite — and Gaps Remain

Why It Matters

These gaps threaten insurers’ operational resilience and could inflate claim costs, prompting tighter underwriting standards across the cyber‑insurance sector. Strengthening internal defenses is essential for insurers to model best‑practice security for their policyholders.

Key Takeaways

• Insurers use immutable backups, but definitions vary widely
• Business email compromise drives over half of cyber claims
• Half of insurers patch monthly, exposing windows for attackers
• Domain‑joined SaaS accounts create single‑point‑of‑failure risks
• RTO tests often ideal; full‑network recovery rarely validated

Pulse Analysis

The cyber‑insurance landscape has exploded, with premiums surpassing $15 billion last year and expected to top $16 billion in 2025. Insurers sit at the nexus of risk assessment, policy conditions, and incident response, giving them unparalleled insight into evolving threats. Yet that very position makes them lucrative targets; a breach can expose sensitive client data and disrupt the broader financial ecosystem, amplifying the stakes for both carriers and the firms they cover.

The report highlights three persistent security blind spots. First, while most carriers claim to employ immutable backups, the lack of a universal definition creates ambiguity that can undermine recovery guarantees. Second, credential hygiene remains uneven: domain‑joined SaaS accounts and reliance on less secure MFA methods such as SMS introduce single points of failure. Finally, patch management is inconsistent—only about 50% of insurers apply security patches on a monthly cadence, leaving exploitable windows that adversaries can weaponize within hours of disclosure. These deficiencies mirror the challenges faced by policyholders, suggesting a systemic gap in cyber‑resilience across the industry.

For the market to mature, insurers must tighten internal controls and standardize resilience metrics. Adopting a clear, industry‑wide definition of immutable backups, enforcing segmented identity architectures, and expanding full‑network RTO testing will raise the security baseline. As carriers improve their own posture, they can better evaluate client risk, price policies more accurately, and reduce loss ratios. Ultimately, a more secure insurer ecosystem translates into stronger cyber‑insurance products and heightened confidence for businesses navigating an increasingly hostile digital environment.