Thomas Dunbar has a simple philosophy for executing the complex task of protecting his company's sensitive data among thousands of employees in 60 offices, in more than 20 countries. "We talk about our employees being the first line of defense, saying, 'Security starts with you,'" says XL Catlin's head of information risk management.

It's the rock upon which Dunbar's team continues to build and expand its program, an ever-evolving set of data-risk-management protocols and internal controls that have earned it the distinction of National Underwriter P&C's 2015 Excellence in Cyber Security Risk Management Award.

"Exposing customer data to unauthorized individuals could do irreparable damage to our customers, lose our customers' trust, damage XL Catlin's reputation, and result in financial loss and exposure to regulatory fines," says Dunbar. To combat these risks, the company has deployed an in-depth risk management strategy that focuses on prevention, detection, response and remediation through people, process and technology-tiered tactical solutions.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

  • All news coverage, best practices, and in-depth analysis.
  • Educational webcasts, resources from industry leaders, and informative newsletters.
  • Other award-winning websites including and

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.