The Agency Cyber Playbook: A Guide to Risk, Reputations, and Recovery

Most insurance agency owners in Massachusetts have a Written Information Security Program (WISP) on file, but few feel confident it would stand up to a real-world incident. Cybersecurity is no longer just an IT issue. It is a business risk that affects operations, client trust, reputation, and recovery.

In this practical session, we will cover the questions every agency owner should be asking about cybersecurity, identity protection, recovery planning, and AI readiness. Attendees will learn how modern attacks commonly start, why backups alone are not enough, and what steps can help reduce risk and improve resilience.

The session concludes with an interactive ransomware exercise that walks through the critical decisions agency owners face during the first 24 hours of an incident, including insurance, legal considerations, communications, and recovery priorities.