Enterprise service management in insurance: securing IT and field operations | Cllimber

Enterprise service management in insurance:
securing IT and field operations

In brief

How do insurers secure IT for office and field staff?

Insurers secure IT and field operations by keeping every device and application an adjuster uses in an audited inventory, and by running onboarding, access and support requests through one employee service portal. In Freshservice, IT asset management tracks the estate, enterprise service management extends the same workflows to HR and other teams, and the Freshworks Trust Center lists ISO 27001 and SOC 2 Type 2.

Regulator clockNAIC model law: notify the insurance commissioner within 72 hours of a cybersecurity event; 28 jurisdictions have adopted it
Field workforce389,700 US claims adjuster, appraiser, examiner and investigator jobs (BLS)
Licence recovery$53.6 million in savings from unused software licences found with Freshservice ITAM (Freshworks-reported)
Onboarding exampleVillage Roadshow on Freshservice: new-starter onboarding cut from two weeks to five minutes (Freshworks-reported)

Enterprise service management in insurance: one service model for office and field staff

Enterprise service management in insurance is the use of IT service desk software and IT service management practice across the whole insurer, so claims, underwriting, HR and facilities teams share one employee service portal and one audited workflow. IT asset management sits underneath it, recording every laptop, tablet and application that touches claims data, including the devices adjusters carry into the field.

Insurance makes that harder than most sectors. Adjusters inspect damaged property away from the office, catastrophe seasons bring sudden waves of temporary and contract staff, and insurance groups often run several brands or subsidiaries. Freshservice, the IT service management software from Freshworks used as the example on this page, covers the pieces: IT asset management, incident and change management, an employee portal and service catalogue, multiple portals for brands or subsidiaries, and Freddy AI for employee requests.

Why insurers treat field IT as a regulated estate

  • Claims data travels: photos, policy details and medical or financial records sit on devices used outside the office.
  • State cybersecurity laws: 28 US jurisdictions require insurers to run an information security programme and give fast notice of cybersecurity events.
  • Asset inventories: New York's cybersecurity rules now require a documented inventory tracking each asset's owner, location and classification.
  • Catastrophe surges: a major storm or wildfire brings adjusters who need devices, access and training within days, and offboarding when the surge ends.
  • Group structures: separate brands and subsidiaries often need separate portals with shared controls.

Insurance IT under regulation and catastrophe pressure: the figures

Insurers face reporting deadlines from state regulators, tighter inventory rules in New York, and six consecutive years of catastrophe losses above $100 billion. The figures below describe the sector and its rules, not Freshservice.

72 hours
Deadline under the NAIC Insurance Data Security Model Law (#668) for notifying the insurance commissioner after determining that a cybersecurity event has occurred; 28 jurisdictions had implemented the model law by August 2025
Source: NAIC Model Law #668, Section 6; NAIC brief, Aug 2025; read 1 Oct 2026
1 Nov 2025
Date New York's amended cybersecurity rules began requiring a written asset-inventory policy tracking each asset's owner, location, classification, support expiry date and recovery time objective
Source: 23 NYCRR 500.13 summary, read 1 Oct 2026
$107bn
Insured losses from natural catastrophes in 2025, the sixth consecutive year above $100 billion; the US accounted for 83%
Source: Swiss Re Institute, 16 Dec 2025, read 1 Oct 2026
389,700
US jobs for claims adjusters, appraisers, examiners and investigators, with a median wage of $78,020; employment is projected to fall 6% by 2035
Source: BLS Occupational Outlook Handbook, updated 27 Aug 2026, read 1 Oct 2026
4 hours
Deadline under the EU's DORA, which covers insurers, for the initial notification of a major ICT-related incident after classifying it as major
Source: Delegated Regulation (EU) 2025/301; EIOPA; read 1 Oct 2026

A shrinking adjuster workforce facing persistent catastrophe losses means more work per adjuster and more reliance on temporary and contract staff during surges. Each surge is an IT event: devices issued, access granted, and both reversed when the work ends.

IT asset management: the audited inventory behind every adjuster's device

New York's rule sets the most specific bar: for each asset, the insurer records its owner, location, classification, support expiry date and recovery time objective, and validates the inventory on a stated schedule. For a field adjuster, that means every laptop, tablet, phone and claims application they use has a named owner and a known location, and is removed from the inventory when it is returned.

Freshservice's IT asset management (ITAM) discovers and tracks assets across on-premises, cloud and hybrid environments, tracks software for licence compliance, and maps how applications, services and infrastructure connect, with discovery and dependency mapping added from Device42, which Freshworks acquired in June 2024. Freshservice's Growth, Pro and Enterprise plans include the ITAM Growth package with 100 asset units; more units and advanced functions cost extra.

On results, the Freshservice Benchmark Report 2025, drawn from more than 187 million tickets across 10,743 teams in 118 countries, reports $53.6 million in savings as Freshservice ITAM helped customers identify unused software licences. Trade coverage of the same report adds that ITAM users cut average resolution time by 8.28%; Freshworks' own report page does not show that figure.

Audit questionEvidence that answers itIn Freshservice
Which devices hold claims data?A discovered inventory with owner and location for each deviceITAM discovery across on-premises, cloud and hybrid estates
Which systems are critical?Dependency maps linking assets to claims and policy servicesRelationship maps; Device42 dependency mapping
Is our software licensed and used?A software inventory matched to entitlements and usageSoftware asset tracking in ITAM
Who changed what, and who approved it?Change records and an admin audit trailChange and release management on Pro and Enterprise; audit logs on Enterprise
Were a temporary adjuster's devices and access returned?An offboarding record closed against each assetOffboarding workflows in Journeys, checked against ITAM records

Sources: Freshservice ITAM; Device42 in Freshservice (5 Feb 2025); Freshservice Benchmark Report 2025; CX Quest report coverage; Freshservice pricing; all read 1 Oct 2026.

IT service desk software for claims operations: incidents, changes and access

An IT service desk in an insurer handles tickets that quote policy numbers and claim details, so the desk itself is part of the data-protection perimeter. Freshservice's incident management runs on every plan; its problem, change and release management on Pro and Enterprise; and admin audit logs and a configuration sandbox on Enterprise. Its alert management, from the Growth plan, opens incidents from monitoring tools, and on Pro and Enterprise its Freddy-based automated grouping attaches related alerts to the open incident, which Freshworks says reduces alert noise by up to 50%.

For field staff, the service desk has to reach them where they work. Freddy AI Agent answers employee questions and takes actions in Microsoft Teams, Slack, the support portal and email; it is part of the Enterprise plan with 1,200 sessions a year. Freshworks' Freddy AI FAQs state that customer data is never used to train third-party models, and that US- and EU-hosted data stays in its region for AI processing, while data hosted elsewhere may be sent to Azure OpenAI in another region without being stored there. Those FAQs exclude Device42 and FireHydrant, the incident-management company Freshworks bought in January 2026, so each needs a separate data review.

Sources: Freshservice pricing; Freshservice Support, automated grouping, Freddy AI Agent, Freddy AI data and safety FAQs; all read 1 Oct 2026.

Employee service portal: onboarding adjusters through enterprise service management

An employee service portal is the single place staff go to ask for anything: a laptop, system access, a payroll correction, a building pass. Behind it, a service catalogue turns each request into a workflow with approvals and tasks for the right teams. For an insurer, the test case is the catastrophe surge: dozens of adjusters who need devices, claims-system access and expense set-up within days, and the reverse when the work ends.

Freshservice provides an employee portal and service catalogue, and Journeys, which runs onboarding, offboarding, promotions and relocations as one workflow across HR, IT and other teams. Freshservice for Business Teams, which gives HR, finance, legal and facilities their own workspaces, costs $49 per agent a month on its Pro plan, billed annually. Multiple requester portals, on Freshservice Pro and Enterprise, let an insurance group give each brand or subsidiary its own portal with its own URL, branding and sign-in, up to the account's workspace limit.

Freshworks' case studies come from outside insurance, so they show the mechanism rather than sector results. Village Roadshow, an Australian cinema and theme-park group with 5,500 employees across 37 locations, says onboarding a new employee took two weeks before Freshservice and now takes five minutes. Databricks runs HR, legal, security, and learning and development alongside IT on Freshservice, consolidating 10 platforms into one, and reports a 96% customer satisfaction score.

5 minutes
Time to onboard a new employee at Village Roadshow on Freshservice, down from two weeks
Freshworks-reported · Village Roadshow customer story, read 1 Oct 2026
5,400 hours
Saved a year at Village Roadshow, alongside 25% faster ticket resolution on Freshservice
Freshworks-reported · Village Roadshow customer story, read 1 Oct 2026
96%
Customer satisfaction score at Databricks, which runs HR, legal, security and IT service on Freshservice
Freshworks-reported · Databricks customer story, read 1 Oct 2026
10
Separate platforms Databricks consolidated into Freshservice for company-wide employee support
Freshworks-reported · Databricks customer story, read 1 Oct 2026
A risk for insurance groups

Freshservice's documentation warns that downgrading from Pro or Enterprise to a plan without multiple portals deletes the secondary portals — the separate portals a group may run for each brand or subsidiary.

Sources: Freshservice Support, multiple requester portals (updated 12 Aug 2026); Journeys; Freshservice for Business Teams pricing; all read 1 Oct 2026.

Compliance and accreditations for claims data: PinkVERIFY, ISO 27001 and SOC 2

Insurance IT help desks process highly sensitive claims data, and the NAIC model law requires insurers to oversee the security of their third-party service providers. Two kinds of vendor evidence feed that oversight. Process certification shows the workflows follow a recognised framework: Freshservice is PinkVERIFY-certified across six processes — incident, change, problem, IT asset, request fulfilment and service catalogue management — an assessment of ITIL alignment by Pink Elephant, first announced by Freshworks in December 2019. Freshworks also describes Freshservice as a Gold Accredited Tool Vendor with certification across 14 ITIL practices.

Security attestation shows the vendor itself is audited. Freshworks, which makes Freshservice, lists ISO/IEC 27001:2022, ISO/IEC 27701:2019 and a SOC 3 report in the Freshworks Trust Center, with SOC 1 Type 2 and SOC 2 Type 2 reports available on request within one business day. None of these makes an insurer compliant with state law; they are the documents its vendor-risk file needs.

Sources: PinkVERIFY announcement (23 Dec 2019); Freshservice ITSM; Freshworks Trust Center; NAIC brief, Aug 2025; all read 1 Oct 2026.

Freshservice pricing for insurers: where the controls sit

Freshservice is priced per agent per month, and the controls an insurer's auditors look for rise with the plan. Cllimber's profile of Freshservice IT service management for insurance companies covers the multi-portal set-up for insurance groups in more detail.

PlanPriceAsset, change and audit controls
Starter$19Incident management
Growth$49Adds the ITAM Growth package with 100 asset units, alert management and on-call management
Pro$99Adds problem, change and release management, automated alert grouping and multiple requester portals
EnterpriseOn requestAdds admin audit logs, sandbox and Freddy AI Agent with 1,200 sessions a year

Prices are per agent per month in US dollars, billed annually. Freshservice for Business Teams Pro costs $49 per agent a month; Freddy AI Copilot is a $29-per-agent add-on; additional ITAM asset units are sold separately. Check Freshworks' site for current pricing.

Sources: Freshservice pricing (US), Business Teams pricing, read 1 Oct 2026.

Pre-audit checklist: what insurers should verify in Freshservice

  • Inventory fields: owner, location, classification, support expiry and recovery time objective recorded for every asset, including field devices
  • Surge offboarding: temporary adjusters' devices and access closed against the inventory when catastrophe work ends
  • Portal plan: subsidiary portals on Pro or Enterprise, and no downgrade without exporting their content first
  • Change trail: approvals recorded on production changes, and audit logs switched on
  • Vendor file: ISO 27001 certificate and SOC 2 Type 2 report from the Freshworks Trust Center on file for third-party oversight
  • AI data path: hosting region and AI-processing region documented; Device42 and FireHydrant reviewed separately
Questions

Enterprise service management in insurance: questions answered

What is enterprise service management in insurance?

It is the use of IT service management workflows across the whole insurer, so claims, underwriting, HR and facilities teams share one employee service portal, service catalogue and audit trail. It matters most for onboarding and offboarding field adjusters, whose devices and access must be recorded and returned.

Does Freshservice include IT asset management?

Yes. Freshservice's ITAM discovers assets across on-premises, cloud and hybrid environments, tracks software licences and maps dependencies. Its Growth, Pro and Enterprise plans include the ITAM Growth package with 100 asset units, and Freshworks reports $53.6 million in savings from unused licences identified with it.

What is an employee service portal?

An employee service portal is a single self-service site where staff request IT, HR, finance or facilities help from a catalogue, with each request routed into a tracked workflow. Freshservice's Pro and Enterprise plans can run multiple portals, each with its own URL, branding and sign-in, for different brands or subsidiaries.

What company sizes is Freshservice best for?

Freshworks publishes no size limit for its plans, which run from Starter at $19 per agent a month to Enterprise priced on request. Its benchmark data covers 10,743 teams, and its published customers include Village Roadshow, with 5,500 employees, and Databricks, with about 10,000. Groups that need separate portals per subsidiary need the Pro or Enterprise plan.

Is Freshservice compliant with insurance data standards?

No software makes an insurer compliant; laws such as the NAIC model law place the duty on the insurer, including oversight of service providers. Freshservice supplies vendor evidence for that file: the Freshworks Trust Center lists ISO/IEC 27001:2022 and a SOC 2 Type 2 report, and Freshservice is PinkVERIFY-certified across six processes, including IT asset and change management.

How quickly must insurers report a cybersecurity event?

Under the NAIC Insurance Data Security Model Law, implemented in 28 jurisdictions by August 2025, an insurer must notify the commissioner within 72 hours of determining a cybersecurity event has occurred. In the EU, DORA requires initial notice of a major ICT incident within four hours of classifying it as major.

How much does Freshservice cost?

Freshservice costs $19, $49 and $99 per agent a month on its Starter, Growth and Pro plans, billed annually in US dollars, with Enterprise priced on request, as read on 1 October 2026. Freshservice for Business Teams Pro costs $49 per agent a month.

JAJenny Allan
Jenny Allan
Founder · Cllimber
Jenny Allan founded Cllimber after running multiple businesses across many sectors and choosing the software each one ran on. Cllimber documents what a tool does, what it costs and what it is not built for, in the order a business asks those questions when it chooses software, and tests it where the provider allows. Freshservice is a Cllimber client; the Freshservice figures on this page are Freshworks-reported, and Cllimber did not run a hands-on test for it. Research funded by the clients covered; the findings aren't. Part of Cllimber's Insurance companies coverage.
Cookies