SRF’s mission is not only to compensate for losses (e.g., property, vehicles, liability) but also to work proactively to reduce risks for our customers. In daily operations, we handle everything from personal data to other sensitive information related to claims.
Within the security domain, the company is legally required to comply with multiple regulations, both at the national and EU level - not only GDPR but also the EU’s Digital Operational Resilience Act (DORA). These frameworks impose strict requirements on risk management, incident handling, monitoring of ICT providers, and continuous training to strengthen information security awareness, etc.
To facilitate information security training and complement physical training sessions, the company decided to find a flexible tool that could integrate with Microsoft 365. The choice fell on CyberCoach, and each month they distribute two mandatory training modules to employees.
