Enterprising Developments

How One Insurer Signed Off on Cloud Security

Joe McKendrick
Insurance Experts' Forum, April 12, 2012

In many ways, cloud computing is seeping into the mainstream of the insurance industry. Such is the case with one insurer. Amazon Web Services, considered the premier vendor for off-site cloud services, is highlighting a recently published case study involving the insurer's first major foray into the cloud.

The carrier wanted to offer e-signature capabilities, and it seemed natural that the entire thing be delivered via the Internet. However, being as security-conscious as they are, application managers were concerned about the security and privacy aspects of such an offering. Documents containing sensitive customer information would be traveling out to a third-party cloud provider, which was, in this case, Amazon. Security and privacy are concerns holding back many carriers from fully embracing the cloud.

“The software-as-a-service solution would give us 100-percent electronic handling capabilities for getting policies signed,” says director of IT for the insurer. “But the business team looked to our department to make sure we could meet the privacy requirements. Our company has different data classifications, with customer names, addresses, social security numbers, and other personally identifiable information deemed highly sensitive and therefore more stringently protected. To license the e-signature solution, we had to be sure that sensitive data would be protected at a level that is acceptable to our internal compliance team.”

Before arriving at its decision to deploy, IT and security teams consulted a range of tests against the cloud-hosted software to ensure that breaches could not occur. The tests went well, but a major challenge was that Amazon security does not extend into the application layer. At this end of the process, the IT team employed another third-party security solution, Trend Micro SecureCloud, that enables the insurer's team to manage data security and encryption at the application layer.

The takeaway here is that companies need to stay in control of their own data security, no matter what type of cloud service—public, private or hybrid—is employed. Cloud service providers offer compelling new capabilities, but security starts—and stays—at home.

Now that the insurer is comfortable and experienced with a cloud application, there's no doubt there will be more cloud-based initiatives in the works for the carrier.

Joe McKendrick is an author, consultant, blogger and frequent INN contributor specializing in information technology.

Readers are encouraged to respond to Joe using the “Add Your Comments” box below. He can also be reached at joe@mckendrickresearch.com.

This blog was exclusively written for Insurance Networking News. It may not be reposted or reused without permission from Insurance Networking News.

The opinions of bloggers on www.insurancenetworking.com do not necessarily reflect those of Insurance Networking News.

Comments (0)

Be the first to comment on this post using the section below.

Add Your Comments...

Already Registered?

If you have already registered to Insurance Networking News, please use the form below to login. When completed you will immeditely be directed to post a comment.

Forgot your password?

Not Registered?

You must be registered to post a comment. Click here to register.

Blog Archive

In the Big Data Era, Storage is More than 'Just' Hardware

For on-premises needs, the latest technologies, including flash, solid state drives, and in-memory computing offer new ways to provide rapid access to new data.

Core Transformation – The Ultimate Balancing Act

The core transformation journey requires companies to shift from reactive to proactive business models, incorporating maturing and emerging technologies, customizing and personalizing products, and accelerating speed to market while providing improved customer service.

Wearables Poised to Reshape Insurer-Insured Relationship

Boosted by the impending release of the Apple Watch, wearable devices have received a fair amount of attention recently Ė and with good reason. This emergent technology has the potential to alter the way the health insurance industry operates on a fundamental level.

Despite Valiant Efforts, Insurers' Consumer Ratings Drop

Insurers also are confronting waves of disruptive changes, including big data analytics, an aging population, ongoing economic uncertainty and the growing frequency and severity of natural disasters, which threaten to challenge and undermine businesses.

Why You Can't Take a Wrecking Ball to Your Legacy System

If you think of enterprises like collections of neighborhoods that need to be nurtured, you quickly see that architecture, not obliteration, is the key.

The Apple Bounce: Are Wearables Truly this Big?

I just donít believe it; only 720,000 Androidwear watches were sold in 2014. Apple has been amazingly successful in so many markets. Were they always first? No, a lot of products before. Were they always best? Again, no, superior devices have fallen.