A lower cyber insurance premium would be welcome news to most CFOs. The more interesting opportunity is finding out whether cybersecurity investments your organization already makes could strengthen its position with insurers.
That connection was central to a partnership announced in October 2025 between Integrated Business Systems (IBS), the business behind ProtectMyIT, and Antigen Security. Developed for financial-services organizations, the Cyber-Insurance Savings Program brought technical risk management and insurance considerations into the same conversation.
A Partnership Built Around Financial Risk
For a financial-services firm, cybersecurity affects systems used to manage sensitive records, transactions, customer relationships, and business operations. Those same systems and safeguards can become part of an insurer’s assessment of the organization’s risk.
The IBS and Antigen Security partnership was designed to address that relationship. IBS contributed managed IT and sector-specific technology expertise, while Antigen brought a cybersecurity and insurance-alignment approach built around measurable controls and documented risk reduction.
The announced program targeted banking, accounting, payment processing, financial technology, investment management, and related businesses. Its commercial premise was that stronger controls and evidence of their effectiveness could help qualifying organizations improve their insurance position.
Start With the Controls Already in Place
Organizations often have several layers of cybersecurity protection distributed across their technology environment. Endpoint protection, access management, monitoring, and other safeguards may already be operating, although their configuration and coverage can vary considerably.
Antigen Security’s approach includes examining existing controls before determining where additional investment is justified. Its published cyber-insurance case material describes how configuration improvements and better use of existing technology contributed to stronger evidence for an insurer.
That creates a practical starting point for finance. Before approving another security purchase, a CFO can ask whether existing tools are configured appropriately, whether important controls are operating as intended, and whether the organization can demonstrate that performance.
A business might already pay for security capabilities it has not fully implemented. Identifying that gap can make better use of existing expenditure while addressing weaknesses that would otherwise remain in the technology environment.
Resilience by Design Connects Security With Insurance
The partnership announcement identified Antigen Security’s Resilience by Design approach as the foundation of the program. Its method brings together risk identification, control prioritization, implementation, and documentation so cybersecurity work can be evaluated against organizational risk and insurance requirements.
The approach draws on recognized frameworks, including the Center for Internet Security (CIS) Controls and the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF). These provide reference points for assessing security practices and deciding which improvements deserve attention.
For a finance leader, this gives security proposals a more useful structure. Each recommendation can be examined against an identified risk, the proposed technical response, its cost, and the evidence needed to demonstrate the resulting improvement.
How the Program Connects Security Work With Insurance
The announced partnership established a sequence connecting cybersecurity evaluation with underwriting considerations.
| Program Activity | Business Purpose |
|---|---|
| Risk assessment | Identify weaknesses and relevant exposures within the technology environment |
| Control prioritization | Direct resources toward safeguards that address meaningful risks |
| Implementation | Strengthen, configure, or introduce selected controls |
| Documentation | Establish evidence of the measures in place and their operation |
| Insurance alignment | Use that evidence to support relevant underwriting discussions |
This structure gives finance, IT specialists, and insurance professionals a common starting point. Technical recommendations can be connected with business exposure and the supporting documentation an insurer may request.
ProtectMyIT’s established Compliance & Cyber Liability Alignment service addresses related work through assessments, remediation guidance, documentation, and ongoing oversight. The Antigen partnership introduced a more specific connection between cybersecurity control improvements and potential insurance savings for financial-services organizations.
Financial Firms Need Different Security Priorities
An accounting practice and a payment processor may both handle sensitive financial information, but their technology environments support different activities. An accounting firm may concentrate on protecting client records and financial documents, while a payment processor depends on systems handling transactions and related integrations.
Investment and portfolio management organizations introduce another set of requirements. Their operations can involve trading systems, client communications, portfolio information, and access controls surrounding sensitive financial activity.
The original partnership was developed with these sectors in mind. That focus allows cybersecurity assessments to consider the applications, information, and operating requirements associated with the organization’s actual business.
It also affects the questions finance should ask. A proposed safeguard deserves attention for the particular systems and risks it addresses, rather than simply because the same technology appears in another firm’s security budget.
Potential Savings Depend on the Underwriting Decision
The prospect of lower premiums attracts attention, but insurers assess more than the presence of security software. Relevant considerations can include the organization’s exposure, implemented controls, claims history, and other underwriting factors.
The IBS–Antigen announcement associated the program with potential premium savings through better-aligned safeguards and documentation. Any resulting premium or coverage terms depend on the insurer’s assessment of the individual organization and policy.
For CFOs, the financial case should therefore account for two possible benefits. Security improvements may reduce operational exposure, while the resulting evidence may also support more favorable insurance considerations.
The first benefit deserves evaluation even when the second is uncertain. A safeguard that addresses a meaningful weakness can contribute to the organization’s protection independently of an insurer’s pricing decision.
Documentation Shows What the Technology Is Doing
Purchasing a security tool does not establish that it is configured correctly or applied to every relevant system. An assessment can examine where the safeguard operates, how it is maintained, and whether exceptions leave important exposure unresolved.
Documentation provides a record of those findings and subsequent improvements. Configuration records, control assessments, and other appropriate evidence can give insurers a more substantiated picture of the organization’s security practices.
Antigen Security’s methodology emphasizes that relationship between operating controls and supporting evidence. ProtectMyIT’s technology management and compliance-alignment capabilities address adjacent needs, including ongoing safeguards, assessments, and documentation.
For finance leaders, the result is a stronger basis for discussing cybersecurity expenditure. The conversation can move from what the organization has purchased to what its controls are accomplishing and how their operation is demonstrated.
Bring the Right Specialists Into the Conversation
A CFO considering cybersecurity investment needs input from people with different responsibilities. Business leadership establishes priorities, technical specialists assess the environment, and insurance professionals explain the underwriting considerations associated with coverage.
The IBS–Antigen model was developed to connect those perspectives through a defined cyber-risk approach. Its financial-services focus also acknowledges the technical and regulatory demands associated with sensitive financial information and business-critical systems.
That combination gives an interested organization a specific subject to investigate: whether its existing safeguards, planned improvements, and insurance requirements could be evaluated together rather than through disconnected spending decisions.
Frequently Asked Questions
What is the ProtectMyIT and Antigen Security partnership?
Integrated Business Systems, the business behind ProtectMyIT, announced a Cyber-Insurance Savings Program with Antigen Security in October 2025. The partnership connected sector-focused IT expertise with cybersecurity assessments, control improvements, documentation, and insurance considerations.
Which businesses was the cyber-insurance savings program developed for?
The announced program targeted financial-services organizations, including banks, accounting practices, payment processors, fintech businesses, and investment or portfolio management firms. ProtectMyIT’s broader technology services also support commercial real estate and related organizations, but the original program had a specifically financial-services audience.
How can stronger cybersecurity controls affect insurance considerations?
Insurers may consider an organization’s implemented security measures when evaluating risk and determining underwriting terms. The ProtectMyIT and Antigen Security partnership connected control assessment, improvement, and documentation with that process so participating firms could present better evidence of their safeguards.
Does the partnership guarantee lower cyber insurance premiums?
No premium reduction is guaranteed because pricing and coverage depend on the insurer, policy, and individual organization. The ProtectMyIT and Antigen Security partnership was announced around the potential for improved insurance considerations through stronger, better-documented security controls.
Connect Security Investment With Insurance Considerations
The value of this approach begins with knowing which safeguards your organization has, how well they operate, and where improvement would address meaningful risk. That knowledge can inform security spending while giving finance a stronger basis for discussing potential insurance benefits.
Discuss cyber insurance risk controls with ProtectMyIT to examine how your existing safeguards, documentation, and security priorities could support a more coordinated approach to financial and operational risk.
