Because insurance companies have such broad reach of personal information, it's the perfect starting point for identity theft. Failing to implement security controls to counter those attacks could lead to companies in the industry needing insurance of their own.
Security teams need to stop spear-phishing campaigns, sophisticated malware and social engineering attacks, among others, across a sprawling attack surface. At the same time, businesses must watch out internally for insider threats as well.
