September 2026 | Insurance Agency Cybersecurity Salt Lake City | AI & Disaster Recovery | Agency Continuity Planning
Insurance professionals spend their careers telling clients to prepare before the loss. Yet inside many agencies, the disaster recovery plan gets the treatment you would never accept from a client: it exists, roughly, somewhere — untested and out of date. Most Salt Lake City agencies know they should have a current plan for an AMS outage, a ransomware event or a breach involving policyholder data. Few have one that is current, tested and complete.
That is not because they lack initiative. Usually, the challenge is getting the first version down. People are far better at improving something than starting from scratch. Give your agents and staff a rough draft and they will point out what is missing, what is unrealistic and what needs to change. Leave them staring at an empty document, and the work gets pushed aside — especially with renewals on the calendar.
That is where AI fits into preparedness planning for insurance agencies — not as a replacement for strategy or cybersecurity expertise, but as a tool that provides a useful starting point. With September being National Preparedness Month — the month your industry practically owns — here are five ways to put it to work.
1. Document Processes Faster
One of the biggest obstacles to preparedness planning is getting everyday processes out of people's heads and into a format others can follow during an emergency — or when a key CSR is not available.
AI can turn rough notes, call transcripts or scattered bullet points into clear first drafts: how to restore access to Applied Epic or AMS360, who needs to be contacted during an outage, how agents keep quoting and servicing moving when a critical tool is unavailable, which carriers to notify and how.
The draft still needs review by the people who know the agency. But a working draft is much easier to refine than a blank page.
2. Create Checklists and Response Playbooks
A good plan is easier to follow when it is broken into clear steps. AI can create first drafts of checklists and response playbooks for situations like a policyholder data breach, a natural disaster, a ransomware attack on the AMS or a carrier portal credential compromise.
Useful documents include an outage communications checklist for reaching policyholders when agency phones are down, an onboarding and offboarding guide for agents and staff, an agency continuity checklist or a basic response outline for a system issue.
Here too, AI produces a starting point — not a finished plan. It does not know your agency, your carriers, your book of business or your state insurance department's requirements unless you give it the right context. Your leadership team reviews the output and decides on the final version.
3. Identify Gaps You Did Not Know to Look For
The hardest part of recovery planning is knowing what questions to ask. AI can help close that gap. Try prompting it with specific questions:
- What happens if our agency management system is down for eight hours during renewal season?
- What operational risks should an independent insurance agency consider?
- What is typically missing from an agency continuity plan?
- What should a written information security program under state insurance data security laws include?
AI will not know which risks matter most to your agency without context. But it can surface questions, dependencies and weak spots your team should examine more closely — including cybersecurity exposures, like dormant carrier portal credentials, that never made it onto anyone's list.
4. Simplify Technical Information
Most technical documentation is not written with agency principals in mind. Backup reports, security findings and system notes can be accurate and still hard to turn into a clear decision.
AI can translate that information into plain English: summarize what a document says, explain what it means for quoting and servicing, and identify the points your leadership team should discuss with your IT provider.
You do this for clients every day — turning policy language into decisions people can actually make. The goal is the same here: not for every leader to understand every technical detail, but for the right people to understand enough to make informed decisions about what needs attention, what can wait and what could become a serious problem if ignored.
5. Keep Documentation Current
Policies and documentation become outdated faster than people expect. Producers change, carriers update their portals and processes, tools like DocuSign and ShareFile get added to workflows, and new risks emerge as the book of business evolves.
AI makes it easier to review and refresh documentation: compare old procedures against new notes, standardize the format across documents written at different times, or turn recent changes into updated drafts your team can review.
Human ownership still matters. AI can streamline maintenance work, but only a person can decide what is accurate, what is approved and what your agents and staff should follow.
A Warning Before You Start: Keep Policyholder Data Out of Public AI Tools
One caution that matters more for insurance agencies than almost any other kind of firm: never put policyholder PII into public AI tools. Social Security numbers, financial details, health information, claims records — the nonpublic information your agency holds is exactly what state insurance data security laws require you to protect, and pasting it into a public chatbot can itself constitute a reportable exposure.
Use AI on generic drafts, templates and process descriptions — never on real client records. If your agency wants AI in workflows that touch policyholder data, that requires approved, properly configured tools with appropriate safeguards, not a free public website. When in doubt, leave the data out.
Where AI Stops
Everything above depends on using AI the right way: as a draft, a guide, a way to move planning forward. The closer you get to real business impact, the more that distinction matters.
There are things AI simply cannot do, regardless of how good the prompt is:
- Test your backups or confirm your AMS and policyholder data will actually restore under real conditions
- Verify that your recovery timeline is realistic when renewals are pending and carriers are waiting
- Understand the nuances of your book of business, your carriers or your state compliance obligations
- Coordinate your agents and staff during an active outage while policyholders are calling
- Replace the strategic judgment that comes from experience and accountability
Think of it the way you would explain coverage to a client: you would never tell them "the policy document is probably fine" without reading it. Apply that same verification standard to your own recovery plan. That part takes leadership, tested processes and an IT partner who can validate that the plan holds up.
Where a Cybersecurity and IT Partner Fits
A recovery plan can look complete on paper and still fall short when it matters most. The difference is the experience behind it.
Qual IT understands how agency systems depend on one another — the AMS, carrier portals, rating tools, client portals — and where hidden risks emerge. We test recovery strategies to make sure they work in practice, not just in theory, and we bring the insurance agency cybersecurity perspective Salt Lake City firms need to turn a document into genuine protection for policyholder data.
AI can help you build the first draft. We make sure the plan is ready for the real world — and ready for the standards your state insurance regulator expects.
Frequently Asked Questions
Can AI replace a disaster recovery plan for my agency?
No. AI is a drafting and organization tool — it can accelerate documentation and surface questions, but it cannot test backups, validate recovery timelines or coordinate a response during an outage. A real plan requires human ownership and hands-on verification, the same way a real insurance review requires reading the actual policy.
Do you offer IT support and cybersecurity for insurance agencies in Salt Lake City?
Yes. Qual IT provides IT support for insurance agencies in Salt Lake City and across the greater Wasatch Front, including cybersecurity, backup and disaster recovery for policyholder data, carrier portal credential security and agency continuity planning.
How do state insurance data security laws affect our use of AI and our recovery plan?
Laws modeled on the NAIC Insurance Data Security Model Law generally require agencies to maintain a written information security program, protect nonpublic policyholder information and report cybersecurity events to the state insurance department. That means keeping policyholder PII out of unapproved AI tools, documenting your safeguards and keeping your incident response plan current and tested.
The Next Step Is Yours
AI can support you as you think through the plan, organize the work and surface questions your team may not have thought to ask. But knowing where your agency actually stands takes a different kind of conversation — the same kind you have with clients when you move from "you should have coverage" to "here is exactly what you need."
We work with Salt Lake City insurance agencies to protect policyholder data and keep agency systems running.
If you are curious how AI and proactive disaster recovery planning can work together for your agency, schedule a 10-minute discovery call with Qual IT. We will assess where your preparedness efforts stand today and what it would take to strengthen them. Book your discovery call here.
