Insurance carrier CISO outlines threats and tactics.