Reduce social engineering risk across your insurance workforce

Insurance companies hold some of the most sensitive personal and financial data in the economy, including health records, beneficiary details, and bank account information tied to claims and payouts. That combination makes insurers attractive targets for phishing aimed at claims fraud, policyholder data theft, and manipulation of payout instructions. When an attacker can influence who gets paid, or harvest the data needed to impersonate a policyholder, the financial and reputational damage adds up quickly.

Insurance in Indonesia runs through an unusually distributed model. Head office staff, branch offices, bancassurance partners, and large networks of independent agents all touch policyholder data and customer interactions. That means security awareness has to reach far beyond a single corporate office, to people on different systems, with different levels of security maturity, and often outside direct IT control. Agents and branch staff are frequently the softest entry point, and attackers know it.

Insurers are supervised by OJK and must handle personal data in line with UU PDP, which puts pressure on security teams to show that awareness efforts are structured, ongoing, and measurable rather than a single annual session. Regulators and boards want evidence that human risk is understood and improving, backed by data on testing, training, and remediation across the whole distribution network, not just head office.

Claro helps insurance security teams run simulations that reflect real claims, underwriting, and payout workflows, extend training and awareness to branch and agency staff through one platform, and track risk by department so the highest-exposure teams, such as claims processing, get attention first. Reporting maps to ISO 27001 and supports OJK and audit conversations, content is delivered in Bahasa Indonesia and English, and SSO, SCIM, and LDAP integration keep a large, changing population in sync.