Mitigating Risk and Preventing Advanced Email Attacks with an AI-Based Solution

See why the Arch Insurance team considers Abnormal’s platform to be a highly effective, easy-to-use risk reduction solution.

Download PDF

Mitigating Risk and Preventing Advanced Email Attacks with an AI-Based Solution

Kyle Lutterman, AVP, Cybersecurity Risk Engineering:

Arch is an insurance company. We specialize in various different lines of insurance from mortgage to reinsurance to cyber insurance as well. Our clients are Fortune 100s to small to midsize businesses.

We have a very strong product in terms of underwriting insurance, and then we also have a very robust claims operation as well. Ransomware and BEC are probably two of the largest triggers that will cause a claim to be made. We see a lot of claims that arise from phishing, from malware.

Shiraz Saeed, Vice President, Cyber Risk:

So the challenge that we have for underwriting, and the hardest thing that carriers face is, "How do we quantify what is a good risk?" Or, "Who has good quality control procedures?"

Right now, the cyber risk insurance industry is in a transition period. You're noticing a strong emphasis on cybersecurity controls, and the maturity of the cybersecurity controls of an organization, before and after buying the insurance policy. So we're looking for companies that have expertise in the space but that are also forward-thinking.

One of the cool things that we like about Abnormal Security is the fact that they're using machine learning and artificial intelligence in the way that they are screening and go after and attacking malicious emails.

One of the cool features we like is it has an ability to monitor the malicious emails that have come in and out of the traffic. It can be a complement or a supplement to other email security tools, and we can improve on an existing program.

Lutterman:

Abnormal's ability to identify, using AI, new and emerging risk and threats without having to depend on legacy IOCs, allow it to realize when an email is coming from a new source, or from a potentially spoofed domain. This really allows customers to focus on mitigating their email controls.

So we really have to look beyond the typical email security tools that are in place and focus on the emerging technologies that are really having a profound effect on mitigating a lot of the new attacks that we're seeing through email.

A tool like Abnormal allows users to focus on their email which is a primary driver of top and bottom-line growth, both internally and externally.

As a global leader in specialty insurance, mortgage insurance, and reinsurance, Arch Insurance has a mission to protect clients from known risks and emerging threats. The company also provides cyber insurance for clients seeking to minimize the risk of losses related to data breaches, ransomware, business email compromise, and other digital threats that arrive via advanced email attacks.

To support that goal, Arch Insurance continuously seeks strategies and solutions that could help mitigate risk for their clients.

“Ransomware and BEC are two of the largest triggers for claims, and those typically come through email,” said Kyle Lutterman, AVP of Cybersecurity Risk Engineering. “So, the cybersecurity underwriting challenge we have is determining which clients have good security and quality control procedures.”

The Arch Insurance team found that Abnormal’s behavioral intelligence capabilities and its quick, API-based integration with cloud email platforms make it a highly effective, easy-to-use risk reduction solution.

“We like that Abnormal can complement or supplement other email security tools,” said Shiraz Saeed, VP of Cyber Risk. “Users don’t have to switch providers to benefit from Abnormal’s AI-based threat detection. It improves their existing security programs.”

Download PDF