Cyber insurance underwriting is evolving as insurers move beyond static questionnaires toward verifiable risk data.

In this episode of the Cyber Insurance News and Information Podcast, Martin Hinton speaks with Jessica Newman, Global GM of Cyber Insurance at Sophos, about how MDR telemetry and continuous evidence collection are changing how insurers evaluate cyber risk.

For years, cyber insurance underwriting relied on self-reported questionnaires and limited visibility into a company’s security posture. Today, insurers increasingly want proof that cybersecurity controls are deployed, configured properly, and actively monitored.

Jessica explains how Managed Detection and Response (MDR) and telemetry-based insights give underwriters stronger signals about real-world cyber risk.

The conversation explores how these developments may shape the future of cyber insurance underwriting, risk assessment, and policy pricing.

Topics covered include:

• The shift from cyber insurance questionnaires to verifiable risk data

• Why MDR telemetry is becoming important for underwriting decisions

• The future of continuous underwriting and evidence-based risk assessment

• How cyber insurance has evolved over the past decade

• The role brokers, carriers, and buyers play in cyber insurance

• AI’s emerging influence on cybersecurity and insurance markets

• What small and medium businesses should understand about cyber risk today

Jessica also shares her unusual journey from high school principal to cybersecurity executive, and why communication and education remain essential in cybersecurity leadership.

This episode is ideal for cyber insurers, brokers, underwriters, cybersecurity leaders, MSPs, MSSPs, and business owners who want to understand where cyber insurance underwriting is headed.

Our reporting on the Spektrum Labs Sophos deal.

Chapters

00:00 From Education to Cyber Insurance: A Unique Journey

02:59 Understanding Sophos: A Leader in Cybersecurity

04:23 Spectrum Labs Partnership: Revolutionizing CyberInsurance

07:39 The Importance of Proving Cybersecurity Measures

10:18 Evolution of Cyber Insurance: Changes Over the Years

14:03 Bridging the Gap: Brokers, Buyers, and Carriers

16:10 MDR Telemetry: The Key to Risk Assessment

18:55 The Insurability Factor: Enhancing Cyber InsuranceOptions

20:36 Shifting Standards: The Future of Cyber InsuranceUnderwriting

22:15 Current State of Cyber Insurance: Mile 10 of theMarathon

25:26 Continuous Underwriting: The Future of Cyber Insurance

28:36 Data-Driven Risk Assessment: The Future of Pricing

30:55 The Evolution of Cyber Insurance and Data Sharing

37:18 The Role of AI in Cybersecurity

44:54 Navigating Cybersecurity for Small and MediumBusinesses

53:05 Future Trends in Cyber Insurance and Underwriting

Data governance is becoming one of the most important controls in cybersecurity and cyber insurance risk management.

In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton speaks with Josh Mason, CTO of RecordPoint, about how poor data governance and uncontrolled data sprawl dramatically increase the cost and severity of cyber breaches.

Many organizations focus on preventing intrusions, but the real risk often lies in what attackers find once they get inside.

Years of duplicated files, legacy data systems, poorly managed permissions, and forgotten records can expand the breach “blast radius,” creating major legal, regulatory, and insurance exposure.

Josh explains how data governance frameworks, defensible deletion, and AI-assisted data classification can help organizations reduce cyber risk while improving their standing with cyber insurers and regulators.

The conversation also explores the growing role of AI in data management, the risks of shadow AI and third-party tools, and why insurers increasingly demand proof that governance policies are actually enforced, not just written down.

In this episode, you will learn:

• Why data governance is critical to cyber resilience.
• How data sprawl increases breach severity and insurance costs.
• What defensible deletion means and why it matters.
• How AI can both improve and complicate data governance.
• What cyber insurers and underwriters look for when assessing data risk.
• Practical steps organizations can take today to reduce liability.

This episode is essential listening for risk managers, CISOs, cyber insurers, compliance leaders, and executives looking to strengthen cybersecurity strategy and reduce cyber exposure.

Chapters:

00:00 Understanding Cybersecurity Breaches

04:48 The Importance of Data Governance

09:53 Defining Data Governance

12:38 The Impact of Data Sprawl

18:51 Immediate Steps to Mitigate Risks

22:49 The Role of AI in Data Management

30:38 Underwriting in the Age of AI

37:44 Data Governance and Defensible Deletion

40:26 Systemic Risks in Data Management

44:28 Legacy Systems and Their Challenges

49:06 Practical Steps for Data Management

54:40 The Importance of Data Education

01:00:11 Continuous Training and Cyber Resilience

01:02:43 Key Metrics for Data Security

01:08:39 Learning from Past Breaches

AI risk is now identity risk. In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton sits down with Chris Kelly, President of Delinea, to unpack why identity has become the security “control plane” and why that matters when AI agents, service accounts, and automation behave like real users.
They dig into the explosion of non-human identities, what “cloud native” security changes about resilience and uptime, and the practical guardrails organizations need when AI systems can act at machine speed.

The conversation stays grounded in real-world controls that security teams and underwriters care about, including vaulting privileged credentials, enforcing MFA for privileged access, and session recording.
If you’re trying to connect AI risk to operational reality and to cyber insurance expectations, this episode gives you a clear map, with fewer buzzwords, acronyms, and more “do this next.”

Chapters 

00:00 Introduction and Guest Introduction

01:07 The Big Headline: AI and Identity Risks

02:25 AI Pervasiveness and Real-World Examples

04:09 Delinea's Approach to Identity Security

05:38 Customer Challenges in Identity Management

08:28 Chris Kelly's Career Journey in Cybersecurity

11:10 Evolving Awareness of Cybersecurity at the ExecutiveLevel

13:38 The Shift to Identity as a Critical Security Focus

15:11 The Need for a Dedicated Cybersecurity Division

16:28 The Rise of Cloud Native Security Solutions

22:34 Benefits of Cloud Native Architecture

26:06 Resiliency and Continuous Operations in Cloud Security

29:51 AI Strategies in Cybersecurity: Three-Pronged Approach

32:15 AI for Session Recording and Threat Detection

36:04 Security for AI: Protecting Autonomous Agents

41:21 Real-World Example: AI and Flight Booking Scam

44:02 The Growing Threat of Non-Human Identities

46:59 The Coming Trust Collapse and Identity Verification

49:32 AI's Impact on Small and Medium Businesses

55:29 Cyber Insurance and Controls for SMBs

01:00:46 Final Thoughts and Key Takeaways

Non-human identity risk is exploding; bots, service accounts, apps, automations, and AI agents that can outnumber humans by 45:1.

In this Cyber Insurance News and Information podcast episode, Martin Hinton talks with Marshall Sorensen (Myriad360) about why permissions sprawl creates cyber insurance, third-party, and breach exposure, and what governance looks like in practice.

In this episode, you’ll learn:

• What a non-human identity is and where it hides

• Why “Allow access” turns automation into risk

• How attackers exploit tokens and over-permissioned tools

• Monitoring, lifecycle control, and incident response basics

• What insurers and insureds should ask for next

Non-human identities power modern business, but unmanaged permissions create invisible pathways into data, systems, and vendors.

This conversation breaks down practical controls for inventory, least privilege, and monitoring to help teams reduce breach likelihood and improve insurability.

Chapters

00:00 Introduction to Non-Human Identities

01:04 What Are Non-Human Identities?

02:36 Encountering Non-Human Identities Daily

04:14 Scale and Impact of Non-Human Identities

07:44 Myriad360 and Identity Management

12:00 Examples of Non-Human Identities in Use

15:14 Permissions and Transition to Digital Identity

23:53 Turnstiles and Permission Delegation

27:33 Liability and Security Risks of Automation

34:24 Managing Permissions and Access Control

43:46 The Role of AI and Permissions

57:28 Cyber Attacks Exploiting Non-Human Identities

01:09:31 Monitoring and Incident Response

01:16:23 Future Outlook and AI’s Role in Security

01:20:01 Building a Security Culture

01:20:52 Final Thoughts and Advice

Cyber insurance news podcast host Martin Hinton speaks with Glen Williams, CEO of Cyberfort, about how cyber incidents really start and why the human factor still drives many losses. They open with the “high vis jacket attack,” then unpack trust, access, and the common misconception that IT management equals cybersecurity capability. Glen explains Cyberfort’s end-to-end approach, why 24/7 monitoring matters, and how teams spot anomalies before they become claims.

They also discuss AI as a tool for both defenders and attackers, the growing impact of cybercrime on SMEs, and the difference between Cyber Essentials compliance and real resilience.

Glen closes with three practical controls for mid-market firms: staff training, multi-factor authentication, and an analog backup solution for communication during an incident.

In this episode: Social engineering • Human factor • Continuous monitoring • AI risk • SMEs • Cyber Essentials • Cyber insurance • Resilience

Takeaways

• The high vis jacket attack illustrates the ease of gainingaccess to secure areas through social engineering.
• Cybersecurity is not just a technical issue; it involveshuman behavior and trust.
• Organizations often confuse IT management with cybersecurityexpertise, leading to vulnerabilities.
• Continuous monitoring is essential for effectivecybersecurity management.
• Cyber Essentials is a basic standard, but organizations needto go beyond compliance to ensure security.
• The human element in cybersecurity is crucial; trainingstaff can prevent breaches.
• AI is a double-edged sword in cybersecurity, used by bothdefenders and attackers.
• Cybercrime has a significant economic impact, costing theglobal economy trillions.
• SMEs are particularly vulnerable to cyber attacks but oftenlack the resources to defend against them.
• Having an analog backup solution is vital for communication during a cyber incident.

Chapters

• 00:00 Introduction to Glen Williams CEO of Cyberfort
• 02:18 The High Vis Jacket Attack: A Lesson in Trust
• 02:58 Glenn Williams' Background and Cyberfort's Mission
• 04:51 Identifying Market Opportunities in Cybersecurity
• 07:27 Cyberfort's Target Market: Mid-Market Organizations
• 08:22 End-to-End Cybersecurity Services Explained
• 10:11 The Doctor Analogy: Cybersecurity Health Checks
• 11:58 Misconceptions About IT and Cybersecurity
• 15:16 The Importance of 24/7 Cyber Monitoring
• 18:59 The Role of Humans vs. AI in Cybersecurity
• 21:16 The Impact of Cyber Attacks on SMEs
• 24:24 Government Response to Cybersecurity Breaches
• 28:29 The UK's Cybersecurity Landscape and Regulations
• 32:41 Cyber Essentials: Compliance vs. Security
• 36:57 The Importance of Testing Cybersecurity Measures
• 38:20 The Illusion of More: Cybersecurity Spending andVulnerability
• 39:29 The Human Element: Understanding Cybersecurity Mindsets
• 40:25 The Psychology of Cybercrime: Human Manipulation and Vulnerability
• 41:14 The Importance of Awareness: Protecting Digital Spaces
• 44:49 Speed vs. Safety: The Need for Caution in DigitalTransactions
• 46:14 Generational Trust: The Impact of Age on Cybersecurity Awareness
• 48:14 Raising Awareness: The Need for Education inCybersecurity
• 51:45 Cyber Insurance: A Safety Net for DigitalVulnerabilities
• 54:10 The Role of Cyber Insurance in Business Resilience
• 56:52 The Buyer’s Market: Cybersecurity as an Investment
• 59:53 AI and Cybersecurity: The Need for Policies andGuardrails
• 01:02:29 The Jigsaw Puzzle: How Small Details Can Lead to Breaches
• 01:06:33 Three Essential Controls for Mid-Market Companies
• 01:10:30 Cultural Differences in Cybersecurity Awareness

Insurance is supposed to catch you on the worst day. The worst day gets worse when the claim doesn’t pay. Cyber Insurance keeps tightening. Underwriting questionnaires keep growing. Coverage can hinge on procedures, controls, and fine print.

In this episode of The Cyber Insurance News & Information Podcast, Executive Editor Martin Hinton speaks with Dustin Carlson, President of SRA 831(b) Admin. Carlson explains how 831(b) structures can help businesses plan for losses that fall outside the coverage of cyber Insurance. Think exclusions, sub-limits, deductibles, and business interruption that lasts longer than the policy expects.

They also dig into the threat landscape, hitting small businesses. Cybercrime operates like an organized business. Social engineering exploits urgency and trust. Ransomware pressure campaigns drive disruption. Business email compromise and wire fraud continue to grow. Third-party outages can shut operations down even when you did everything “right.”

If you want a clearer view of what Cyber Insurance covers, where it can fail, and how 831(b) may help fill gaps, this episode is for you.

Chapters

00:00 Introduction And 831(b) Plans

01:28 Understanding 831(b): A Rainy Day Fund For Businesses

06:35 The Role Of 831(b) In Cyber Insurance

11:23 Navigating Cyber Insurance: Common Misconceptions

16:21 The Evolving Landscape Of Cyber Insurance

21:29 The Importance Of Understanding Your Insurance Policy

26:24 The Growing Threat Of Cyber Crime

28:50 The Illusion Of Safety In Cybersecurity

30:26 Understanding Ransomware Payments And Reporting

33:17 The Organized Nature Of Cybercrime

35:50 Social Engineering: The Human Element Of Cybersecurity

38:20 Third-Party Dependencies And Business Interruptions

45:53 Business Email Compromise: A Growing Threat

54:38 Reframing Cybersecurity And Cyber Insurance Business Continuity

Takeaways

• 831(b) plans serve as a tax-deferred rainy day fund for businesses.
• Traditional cyber insurance often has significant exclusions.
• Small businesses are prime targets for cyber attacks.
• Proactive risk management is essential for business continuity.
• Ransomware payments often go unreported, complicating risk assessment.
• Business email compromise is a growing threat to companies.
• Understanding your insurance policy is crucial to avoid gaps in coverage.
• Cyber threats are constantly evolving, requiring ongoing vigilance.
• Third-party dependencies can lead to unexpected business interruptions.
• Training employees on cybersecurity procedures is vital for protection.

Cyber risk in 2026 is accelerating as AI reshapes fraud and cybercrime. In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton speaks with Jason Makevich, founder and CEO of Greenlight Cyber and founder of PORT1. They outline what SMB leaders and MSPs should expect from deepfakes, scaled ransomware tactics, and third-party exposure.

Jason shares a proof-first mindset for modern trust. He explains practical controls that reduce loss without huge spending. The conversation also connects incident reporting and better data intelligence to the pressure on cyber insurance underwriting.

If you track cyber risk in 2026, this episode offers clear steps you can apply this week.

Find Jason

Greenlight Cyber

PORT1

Liminal

Takeaways

• Cybersecurity is essential for small and medium-sizedbusinesses.
• AI is transforming the cybersecurity landscape, but it alsoposes new risks.
• Organizations must take proactive steps to mitigate cyberrisks.
• Data governance is crucial when using AI tools.
• Supply chain risks are a significant concern incybersecurity.
• Legislation is evolving to address cybersecurity challenges.
• Cybercrime is increasingly organized and sophisticated.
• Trust but verify is no longer sufficient; don't trust atall.
• The majority of organizations are not adequately protectedagainst cyber threats.
• A major cybersecurity incident is likely to occur in thenear future.

Chapters

00:00 Introduction to Cybersecurity and MSPs

03:00 The Evolution of Cybersecurity Needs

05:52 The Impact of AI on Cybersecurity

08:47 Understanding Cyber Risk and Leadership

11:36 The Role of History in Cybersecurity

14:56 The Scale of Cybercrime and Its Consequences

17:38 Mandatory Reporting and Cybercrime Awareness

20:39 The Responsibility of Businesses in Cybersecurity

23:51 The Misconception of Cybersecurity Risks

26:26 Supply Chain and Third-Party Risks

29:16 The Need for Secure Design in Technology

32:25 The Human Element in Cybersecurity

35:32 Conclusion and Future Outlook

41:14 Understanding Cyber Crime Today

45:31 The Geopolitical Landscape of Cyber Crime

49:29 The Rise of Deepfakes and Trust Issues

53:37 Trust but Verify: A New Approach to Security

58:37 Basic Security Practices for Small Businesses

01:01:46 Finding the Right Cybersecurity Partner

01:06:42 AI Governance and Data Security

01:15:45 Predictions

The Cyber Insurance Market is still maturing. Underwriters want verified controls, consistent security data, and clearer signals of resilience. In this episode of The Cyber Insurance News Podcast, host Martin Hinton speaks with Max Perkins, Head of Insurance Solutions at Spektrum Labs.

Perkins explains why cyber insurance applications overwhelm many businesses, why attestations fall apart at claim time, and why data validation matters for underwriting.

They also dig into today’s threat landscape, including social engineering and ransomware pressure, plus what Perkins expects next on pricing, talent movement, and control verification. If you buy, sell, or underwrite cyber coverage, this episode delivers practical guidance you can use before renewal.

Find Max here

Find Spektrum Labs here

The Dell Technologies article we discuss

Takeaways

• Cyber resilience is essential for organizations of all sizes.
• Standardized data is crucial for effective underwriting in cyber insurance.
• Small businesses often misunderstand the complexities of cyber insurance policies.
• The threat landscape is evolving, with social engineering becoming more prevalent.
• Verification of security measures is key to building trust with underwriters.

Chapters

00:00 Introduction to Cyber Insurance and Spectrum Labs

02:04 Max Perkins' Journey in Cyber Insurance

09:27 The Current State of Cyber Insurance

14:56 Challenges in the Cyber Insurance Application Process

21:33 Understanding Cyber Insurance for Small Businesses

26:25 The Role of Underwriters in Cyber Insurance

31:14 The Importance of Data Validation

37:05 The Evolving Threat Landscape

56:05 Predictions and Myths in Cyber Insurance

In this episode, Martin Hinton speaks with Kelly Miller from FTI Consulting about the intricacies of cyber incident response and the critical role of communication during crises. They discuss the importance of establishing processes, understanding stakeholder dynamics, and the human element in crisis management.

Kelly emphasizes the need for transparency, effective internal communication, and the value of preparedness through tabletop exercises. The conversation highlights common mistakes organizations make during incidents and the significance of crafting consistent messages while navigating legal and media relations.

Takeaways

• Communication is a risk control, not just PR.
• Over-promising can lead to loss of trust.
• Establishing processes is crucial in the first hour.
• Trust is foundational in crisis management.
• Preparedness can save money in the long run.
• Words matter, especially in legal contexts.
• Transparency is key to maintaining trust.
• Internal communication must be disciplined.
• Recovery narratives should reassure customers.
• Tabletop exercises help build muscle memory.

"The worst thing is over-promising."

"Over-promising sets the wrong tone."

"Transparency is crucial for trust."

Chapters

00:00 Introduction to Cyber Incident Response

02:52 The First Moments of a Cyber Breach

05:39 The Importance of Communication in Crisis

09:06 Establishing Effective Processes

12:02 Understanding Stakeholder Dynamics

14:59 The Human Element in Crisis Management

17:57 Mapping Stakeholders and Key Messages

20:53 Legal and Insurance Considerations

23:58 Navigating Media Communications

26:45 The Role of Internal Communications

29:46 Maintaining Message Discipline

32:47 Recovery and Future Preparedness

34:18 Crafting a Recovery Narrative

38:28 The Importance of Practice and Preparation

46:30 Tabletop Exercises: The Scrimmage of Crisis Management

56:42 Words Matter: The Impact of Language in Crisis Communication

Cyber liability insurance now sits at the heart of SME risk management. In this episode of the Cyber Insurance News & Information Podcast, executive editor Martin Hinton talks with Cowbell co-founder and COO Trent Cooksley about how small and mid-sized businesses can prepare for today’s cyber threats.

They dig into business email compromise, ransomware, incident response, and the true cost of a serious cyber incident. Cooksley explains why many SMEs still underestimate their exposure and how cyber liability insurance supports faster recovery, expert incident handling, and stronger security controls.

You’ll hear real-world insights on:

• Why business email compromise remains a leading cyber threat for SMEs

• How ransomware incidents can shut down operations and damage cash flow

• The role of cyber liability insurance in funding response, forensics, and restoration

• How AI is changing both cyber attacks and cyber defense

• What brokers and business owners should know before placing SME cyber coverage

🎙 Guest: Trent Cooksley, COO and Co-Founder, Cowbell
🎙 Host: Martin Hinton, Executive Editor, Cyber Insurance News & Information Podcast

If you work with SMEs as a broker, underwriter, or business owner, this episode will help you rethink cyber risk and cyber liability insurance as a core business protection, not just an add-on.