Prudential turns to AI to secure computer networks against cyber attacks

Prudential, the UK’s largest listed insurer, is turning to artificial intelligence to protect its computer networks in the US, Asia and Africa from malware hackers and internal threats
Financial services group Prudential is setting up security operations centres in Asia and the US that will allow it to monitor potential security threats on more than 100,000 devices on its networks.
The company, the UK’s largest listed insurer, is rolling out artificial intelligence (AI) driven software that can identify unusual activity on its computer networks and automatically isolate hacking or malware attacks across its IT networks in more than 14 countries.
The project will allow security analysts in two operations centres in Asia and the US to respond to potential hacking, malware or insider threats around the clock.
Prudential plc, a life insurance and financial services company with annual revenues of $94bn in 2019, plans to deploy technology developed by Darktrace, a Cambridge University spin-off, across Asia and Africa before the end of the year.
The company, which demerged from its UK M&G insurance operations in October 2019, is focusing on developing its business in Asia – which accounts for more than half its profits – and the US.
Tony Reed, assistant vice-president for cyber security delivery and incident response at Prudential plc, said the project will give Prudential’s security analysts a picture of threats across the company’s entire computer networks for the first time.
Reed said that Darktrace’s self-learning software, known as “the enterprise immune system”, will reduce the time security analysts have to spend trying to interpret unusual events on the network by half.
The software has proved itself in Prudential’s US operation, Jackson National Life Insurance, which manages assets of $260bn, over the past five years.
“We are able to react faster because we are finding things faster. We are saving a tonne of analyst time,” Reed said in an interview with Computer Weekly. “Something that would normally take an analyst anything from an hour to two hours to dig into is instantaneous.”
When Reed joined Jackson from HP in 2015, Jackson’s chief information security officer, Guillermo Guerra, tasked him with the job of bringing the company’s security levels up to the level of maturity expected of a large financial institution.
“Even back then, the attacks were getting harder to find. They were attacking faster than you could keep up with. So we needed a tool where we would not be relying on the human element,” he said.
It was difficult for security analysts to track what systems Jackson’s clients were logging into, what devices were talking to each other, and what data was coming in and out of the company, said Reed, but Darktrace’s software offered a solution.
“Having the ability to monitor the entire network 24 hours a day, and actions taking place without an analyst having to go in and do research and spend a couple hours on it, made the choice pretty easy,” he said.
Jackson’s IT team installed network probes and software to monitor 35,000 devices on the company’s internal networks with assistance from Darktrace’s engineers.
Active back-ups
One of the complicating factors was that the insurance company used two ‘active-active’ datacentres to keep simultaneous back-ups of its critical data.
It took time for Darktrace to learn which devices in one datacentre should be talking to which corresponding devices in the second datacentre.
The software, said Reed, more than covers the cost of its annual subscription by cutting the time it takes the company’s 14 security analysts to investigate incidents.
“Even if I had doubled the staff, I wouldn’t be confident that we would see everything and stop everything that we’re doing today. Humans just can’t learn that quickly,” he said. “So it pays for itself every year just in that.”
Even five years ago, a data breach could have cost the company millions of dollars in repair costs, providing crediting monitoring to its 700,000 clients and working with regulators.
“Switching from a perimeter defence model to an AI model was the biggest [and quickest] way we saw to eliminate or reduce the risk of having a security event,” he said.
Learning on the job
In January 2019, Prudential’s US business introduced Darktrace’s Antigena software, which is able to identify potential security threats and cut them off within seconds of detecting them.
The software works by learning how the company’s network and staff normally operate so that it can identify unusual behaviour that might indicate malware or an insider attack from someone who is able to access computer systems within the organisation’s firewall.
Reed is using the software to detect email threats which he estimates account for over 90% of attacks directed against companies. For example, if the Antigena software spots large files of data being sent out of the company, it can intervene to prevent it.
The software is faster, said Reed, than having to submit a ticket to a network specialist, by which time it may be too late.
So far, the insurance company has not experienced any major external attacks. But it has been able to stop an internal incident that could have led to customer data leaving the company and might have required the company to pay for credit monitoring services for the clients affected.
Once Darktrace software is running in Asia and Africa, Reed plans to introduce a “follow the sun” programme to monitor the security of the company’s networks worldwide.
This will replace the current model which requires Jackson’s security analysts to work 12-hour shifts in both the US and Malaysia.
This shift-work system is not ideal, as very little activity takes place on the US or Asian networks after business hours, said Reed.
“It is super quiet [at night]. So a lot of times we’ll tell them ‘Go look at this alert’ or ‘Take this training’ if nothing happens,” he said.
In the future, security analysts in the US will monitor the company’s network traffic across all locations during the day US time, before handing over to a security operations centre in Malaysia.
Darktrace’s software is used by 3,000 organisations including BT, First Great Western, Metro Bank, Ocado, TSB and William Hill. The company signed a partnership deal with McLaren Racing in February.
source computerweekly
Industry: Cyber Security

Latest Jobs
-
- Senior SOC Analyst Level 3. Microsoft Security stack | Ability to achieve SC Clearance
- London
- To attract the right person
-
Job Title: Senior SOC Analyst Level 3. Microsoft Security stack | Ability to achieve SC Clearance Location: Hybrid remote | London / Berkshire Overview: Senior SOC Analyst Level 3 to join a specialist Managed Security Services business. You will be responsible for advanced threat hunting / triage, incident response etc with a strong focus on the Microsoft Security Stack. Key Responsibilities: Lead and resolve complex security incidents / escalations Conduct advanced threat hunting using the Microsoft Security Stack. Build, optimise and maintain workbooks, rules, analytics etc. Correlate data across Microsoft 365 Defender, Azure Defender and Sentinel. Perform root cause analysis and post-incident reporting. Aid in mentoring and upskilling Level 1 and 2 SOC analysts. Required Skills & Experience: The ability to achieve UK Security Clearance (SC) – existing clearance ideal. (Sorry no visa applications) Current experience working with a SOC environment Microsoft Sentinel: Development and tuning of custom analytic rules. Workbook creation and dashboarding. Automation using Playbooks and SOAR integration. Kusto Query Language (KQL): Writing complex, efficient queries for advanced threat hunting and detection. Correlating data across key tables (e.g., SignInLogs, SecurityEvent, OfficeActivity, DeviceEvents). Developing custom detection rules, optimising performance, and reducing false positives. Supporting Sentinel Workbooks, Alerts, and Playbooks through advanced KQL use. Deep understanding of incident response, threat intelligence and adversary techniques (MITRE ATT&CK framework). Strong knowledge of cloud and hybrid security, particularly within Azure. Additional Requirements: Must hold or be eligible to achieve a minimum of Security Clearance (SC) level. Nice to have certifications (e.g., SC-200, AZ-500, GIAC) are desirable. Strong problem-solving and analytical skills. Excellent communication for clear documentation and team collaboration. Please follow Wheaton’s Law.
-
- New Business Sales Hunter | Cyber Security (UK Based)
- London
- To attract the right person
-
New Business Sales Hunter needed | Cybersecurity (UK Based) Are you looking for uncapped commission, a fun and sociable team that drives success with no politics? If so...You must Be UK based - and able to achieve UK SC clearance. (sorry no visas) Have a demonstrable history of sales success in Cyber Security Follow Weatons law. The role: Seeking a proven New Business Sales Hunter to join an established, successful and expanding cyber security firm. New business focused - £1m GP year one target (ramped). Sell a blend of security services & professional services. Ideal experience selling some or all of the following Cyber strategy & risk management Managed detection & response (MDR) Penetration testing Compliance & audit support You: Strong cybersecurity/IT services sales track record. Confident selling into mid-market & enterprise. UK based - London commutable 1x per week. Hunter mindset, full sales cycle ownership. Don't just send an email to apply give me a call on 07884666351
-
- CyberArk Architect
- London
- Upto £110,000 plus bonus and benefits
-
Are you ready to lead from the front and drive innovation in the Identity & Access Management (IAM) space? We’re looking for a seasoned CyberArk Architect who has CDE-CPC ideally or experience with privilege Cloud, someone who can lead with vision, execute with precision, and inspire teams to deliver excellence. As a key leader in our organisation, you’ll bring your strong business acumen and a technology-focused, innovative mindset to the table. You’ll be driving strategic initiatives, shaping transformation programs, and empowering teams to think big and deliver even bigger. Acting as a subject matter expert in CyberArk Leading strategic transformations in: Identity Governance Privileged Access Management (PAM) Access Management Customer Identity and Access Management (CIAM) Building and maintaining strong, collaborative relationships within the team Communicating clearly and confidently — both written and verbal — to deliver updates, raise potential issues, and share insights If you are interested in the above position we are looking for people with: deep expertise and a successful track record in IAM strategy, delivery, or assurance with CyberArk Hold relevant certifications such as CDE in Privileged Cloud or Guardian Have experience in a client-facing role (preferred, but not essential) Thrive in a hybrid working environment and are available to work from our or client London office three days a week Lead with clarity, communicate with impact, and adapt quickly to changing priorities
-
- OUTSIDE IR35 Splunk Engineer- SC Cleared.
- United Kingdom
- N/A
-
OUTSIDE IR35 Splunk Engineer- SC Cleared. You will be responsible for consolidating Splunk ES data from multiple feeds into a single pane of glass to enhance visibility and streamline security operations.