Suspect a breach? Report it immediately — response within 1 hour.Report an incident
EBH Security
Contact us

Cybersecurity for the insurance sector

Insurance companies manage large volumes of personal, financial, and sometimes medical data about policyholders, often over long retention periods. This concentration of sensitive data, combined with sector-specific regulatory oversight, places the industry under significant security and compliance requirements.

Last updated — August 22, 2026

Sector-specific considerations

In Morocco, the sector is supervised by ACAPS (Autorité de Contrôle des Assurances et de la Prévoyance Sociale), whose governance and risk management requirements include the information systems dimension.

Insurers process particularly sensitive data categories (health, financial situation, claims history), which increases the impact of a data breach both from a regulatory standpoint and in terms of customer trust.

The subcontracting chain is often long (brokers, reinsurers, claims management platforms), which multiplies the access points to data and requires active third-party risk management.

Relevant services

Compliance & GRC

Infrastructure Security

Security Awareness Training

Frequently asked questions

Do you support insurers with their obligations toward ACAPS?

Yes, we carry out audits and action plans aligned with the information systems governance requirements expected by the regulator.

Are insurance brokers and intermediaries covered?

Yes, our services apply to insurance companies as well as brokers and intermediaries handling policyholder data.

Do you offer awareness training tailored to claims management teams?

Yes, our training is tailored to roles exposed to high volumes of personal data, including claims and underwriting teams.