Cybersecurity can feel intimidating. But for insurance agents and brokers, it doesn't have to be.
You don't need to be a cybersecurity expert to make a difference. A brief client check-in can ensure coverage keeps pace with an ever-changing threat landscape.
October’s Cybersecurity Awareness Month is the perfect opportunity to connect with clients to review what may have changed since their last policy review.
Cybersecurity risk isn’t just a concern for large corporations. Public entities, places of worship, fire departments, senior living communities, and other small to medium community organizations are increasingly being targeted along with larger corporations.
The facts are staggering. In 2025, one in every three business had experienced at least one successful cyberattack in the past year. AI-enabled cyberattacks rose by an astounding 47% in 2025; with 25% of AI-generated phishing content bypassing traditional filters.
The upside? While 68% of those breaches were caused by human error, these are the kinds of issues that are solvable with a proactive approach.
You don’t need to be a cybersecurity expert—you just need to start the conversation. Checking in with clients using our helpful conversation starters can help assess risk and determine whether coverage is keeping pace.
10 cybersecurity conversation starters:
- Have there been any changes in operations since we last reviewed your coverage?
- Ensures coverage remains aligned with the organization's evolving day-to-day activities.
- Have any new software or cloud-based systems been implemented?
- Helps identify whether coverage should be updated to reflect new digital dependencies.
- How do you collect, store and protect personally identifiable information (PII) data?
- Identifies potential financial exposure from data breaches or unauthorized access.
- How are devices (workstations, laptops, mobile phones) secured?
- Helps evaluate the effectiveness of current cybersecurity defenses.
- Are you aware of regulations that apply to your data handling?
- Identifies potential gaps that could increase cyber liability exposure.
- What firewalls, antivirus/anti-malware, or multi-factor authentication (MFA) solutions are in place?
- Provides insight into the organization’s cybersecurity maturity.
- Have you or your staff experienced any phishing attempts or suspicious emails?
- Can reveal emerging risks before they result in a successful breach.
- What is your backup frequency and retention policy?
- Identifies potential weaknesses in recovery preparedness.
- Do employees or volunteers receive ongoing cybersecurity awareness training?
- Strong security awareness can reduce the likelihood and severity of claims.
- Do you have a documented incident response plan?
- Demonstrates a commitment to preparedness and management.
Every conversation builds trust.
This Cybersecurity Awareness Month, start with a few thoughtful questions. The answers may uncover opportunities to strengthen your clients’ protection—and reinforce your role as their trusted advisor.
READ ON to access resources designed to help independent agents and community-based organizations stay safe.
The information contained in this article is intended for educational purposes only and is not intended to replace expert advice in connection with the topics presented. Glatfelter specifically disclaims any liability for any act or omission by any person or entity in connection with the preparation, use or implementation of plans, principles, concepts or information contained in this publication.
