Protective operates 16.9 million insurance policies and contracts representing over $1 trillion in life insurance in force - a threat surface that demands persistent security architecture at scale. Founded in 1907 and now serving 14.4 million people across life insurance, annuities, and retirement planning products, the company manages sensitive policyholder data, actuarial models, and financial transaction systems that span decades of legacy infrastructure alongside modern platforms. The security challenge here is classic financial services: protecting PII and financial records under strict regulatory frameworks while maintaining operational continuity across systems that can't afford downtime.
The company's tech stack includes Microsoft Dynamics, Excel, and PowerPoint - signals of a Microsoft-centric enterprise environment likely running Azure services, Active Directory domains, and Office 365 tenancies. For security practitioners, this means familiarity with Microsoft's security tooling (Defender, Sentinel, Entra ID), identity and access management at enterprise scale, and hardening configurations across a sprawling Microsoft ecosystem. The threat model centers on ransomware targeting financial data, insider risk from employees handling sensitive customer information, and compliance requirements spanning state insurance regulations and federal financial privacy laws.
With 1,001-5,000 employees distributed across a national footprint that originated in Birmingham, Alabama, Protective represents the security challenges of a legacy financial institution modernizing under pressure. The organization has grown through strategic acquisitions - a pattern that typically introduces integration challenges, shadow IT, and inconsistent security postures across business units. Security teams here likely focus on data loss prevention, secure legacy system integration, phishing-resistant authentication, and third-party vendor risk management across the insurance value chain.
