# Insurers Strengthen Defenses Against AI-Driven Threats > Source: > Published: 2026-05-29 19:22:57.956861+00:00 # Insurers Strengthen Defenses Against AI-Driven Threats Digital Insurance reports that artificial intelligence is increasing fraud and cyber risk for insurers and prompting a shift in defensive priorities. According to the Information Security Forum, organisations should operate as though a breach is inevitable, define a "minimum viable organization," classify critical data assets, enforce least-privilege access, and patch known vulnerabilities immediately, with compensating controls for unpatchable legacy systems. Digital Insurance cites Ryan Kratz, head of cyber for North America at MSIG, saying AI has made ransomware faster and easier to execute and that concentration among **5-10** major cloud and security vendors creates systemic aggregation risk. Digital Insurance also reports that Capgemini found only **10%** of P&C insurers are successfully scaling AI and recommends shifting AI spend toward change management. ### What happened Digital Insurance published a roundup on May 29, 2026 covering how insurers are responding to AI-driven threats. According to the report, the **Information Security Forum** argues organisations should assume a breach is inevitable and focus on resilience, starting by defining a "minimum viable organization," classifying critical information assets by criticality, enforcing least-privilege access, and patching known vulnerabilities immediately. The article cites guidance that legacy systems that cannot be patched require compensating controls and that security leaders should align with business priorities and cultivate enterprise-wide risk ownership. ### What happened (additional reporting) Digital Insurance quotes **Ryan Kratz**, head of cyber for North America at **MSIG**, saying that **AI** has made ransomware faster and easier to execute and that human error at help desks remains a primary attacker vector. The article reports Kratz warning about concentration risk across **5-10** major cloud, data-center, and cybersecurity vendors, creating catastrophic aggregation exposure and underappreciated contingent business interruption risk. Digital Insurance also reports **Capgemini** found only **10%** of property-and-casualty insurers successfully scale AI and recommends shifting AI investment toward change management. ### Editorial analysis - technical context Industry pattern observations: security teams facing AI-augmented attacks commonly reframe defenses from pure prevention to layered resilience, combining identity and access controls, rapid patching, and compensating controls for legacy stacks. Observed patterns in similar transitions highlight vendor diversification and tighter third-party risk management as routine responses to aggregation exposure. ### Industry context For practitioners: the article's themes echo a broader shift in risk management where faster, AI-assisted attack tools increase the value of detection, segmentation, and incident rehearsal. Observed patterns in comparable sectors show that investments in human processes, access governance, and change management often yield faster risk reduction than incremental model deployments alone. ### What to watch Indicators to monitor include whether insurers and their vendors publish breach-resilience playbooks, whether industry groups quantify aggregation concentration across cloud and security providers, and whether insurers shift AI budgets toward change management, training, and identity/access projects instead of primarily funding new model deployments. ## Scoring Rationale This coverage highlights a notable, practitioner-relevant shift in cybersecurity posture for insurers as AI lowers attacker costs and increases systemic concentration risk. The story is important for security and ML governance teams but not a frontier-model or infrastructure breakthrough. Practice with real Health & Insurance data 90 SQL & Python problems · 15 industry datasets 250 free problems · No credit card [See all Health & Insurance problems](/problems/datasets/health)