Client Portal
Managed IT for insurance brokers
IT Support for Insurance Broking Firms in Melbourne and the South East
A broking firm runs on two things working: the broking platform, and the ability to prove what was advised, quoted and bound, and when. Both sit on technology somebody has to be responsible for.
Want the number first? Our pricing is published: AgileCORE from $85 and AgileCOMPLETE from $130 per user per month ex GST, plus the AgileSECURE add-on at $44, which we strongly recommend for a licensee holding client financial data. Estimate your monthly figure in two minutes, or book a conversation.
The attack aimed specifically at your firm
Payment redirection, as it actually unfolds
Brokers move money and sit between parties, which makes the firm worth attacking. The method is rarely sophisticated, and understanding the order it happens in is what tells you where the controls have to sit.
Access
Someone reaches a mailbox, usually through a reused password or a convincing sign-in page. Nothing visible happens.
Watch
A forwarding rule is created quietly. They read for weeks, learning the clients, the amounts and the language your firm uses.
Wait
They wait for a real payment conversation. No invention is needed, because the thread already exists and is expected by both sides.
Redirect
Revised account details arrive from inside the genuine thread, from the right address, at the moment they are expected.
Where we break the chain
- Multi-factor authentication on every account, no standing exemptions, which stops step one
- Alerting on mailbox rules and forwarding, which catches step two
- Monitoring for sign-ins that do not fit the person or the place
- Access reviewed when people join, change role and leave
Where your firm breaks it
- Verify account details by calling a number already on file, never one supplied in the thread
- Only a named person may authorise a change, and it is recorded
- Staff know that a correct-looking email is exactly what this looks like
Training alone will not carry this, because the email is genuine. We will help you write the process, but it is yours to own.
Where the operational risk sits
When the broking platform is down, the business is down
Most firms have a clear view of their professional risk and a vaguer one of their operational risk. The platform, the CRM and the mailbox are not support tools, they are where the business lives.
The uncomfortable part is that this rarely fails loudly. It degrades. One person works around a problem, then everybody does, and eighteen months later the workaround is the process and nobody has written it down.
Sound familiar
- The platform vendor blames the network and the network blames the platform
- Authorised representatives work from their own devices
- Nobody is certain who still has access to the client files
- Renewal season exposes the same problems every year
What the licence assumes
An AFS licence assumes you can control your own systems
A licensee has to manage its risks adequately and keep proper records. Neither duty has a technology carve-out, and the Privacy Act applies to the personal and financial information a broking firm holds on every client it has ever placed cover for.
If you were asked to show what was sent to a client in 2022, could you, quickly and completely? That is a retention and search question, decided by how mail and documents are stored long before anyone asks. Our compliance obligations page sets out what applies to Victorian businesses, and AgileSECURE is aligned to the SMB1001 maturity framework.
Scope
What we take responsibility for
Agreed in writing on day one in a Responsibility and Accountability Matrix.
Microsoft 365
Licensing, mailboxes, document structure and retention, plus the controls most firms never turn on.
Devices
Standardised and monitored, including the people who work from more than one place.
Security and access
Multi-factor, role-based access for authorised representatives, monitoring aligned to SMB1001.
Vendors
We deal with the platform and connectivity suppliers so your operations lead does not have to.
Published pricing
AgileMANAGED: structured IT from $85 per user / month
We publish our pricing because a firm that budgets properly deserves to know the number before the first meeting, not after the third.
AgileCORE
Remote support, monitoring, security baselines and Microsoft 365 management.
View AgileCORE →AgileCOMPLETE
Everything in CORE, plus onsite support, managed servers with 24/7 monitoring, and quarterly business reviews.
View AgileCOMPLETE →Where we work
Based in Mornington, working across the bay
Agile IT Solutions has been based in Mornington since 2007. A good share of the broking firms we look after sit around Moorabbin and the Bayside precinct, close enough that onsite is practical when it is needed. Most issues are resolved remotely, and onsite support across our service area is included with AgileCOMPLETE.
If you would rather see how we work before talking about your own firm, our case studies set out what we actually did and what changed.
Questions
IT questions from broking firms
Do you support our broking platform?
We do not write your broking platform and we are not pretending to be its consultant. What we take responsibility for is everything underneath it: devices, the Microsoft 365 tenancy, access control, connectivity, backup and the vendor relationships, so the platform has a stable base to run on and somebody to call when something is wrong. When the issue sits with the platform vendor, we deal with them rather than handing you back a ticket number.
How do we handle authorised representatives working from their own devices?
Deliberately, rather than by accident. The practical options are a managed device the firm controls, or controlled access from a device it does not, with the second needing stricter conditions on what can be reached and what can be stored locally. The wrong answer is the common one, which is nobody deciding and everybody doing something a little different.
We already have an IT company. Why would we change?
Usually because nobody is managing the environment, only responding to it. The test we suggest is simple: ask your current provider when a restore was last tested, who has administrator access, and what is scheduled for replacement next quarter. If those answers are not readily available, the issue is ownership rather than effort.
What do you do about payment redirection fraud?
Treat it as a security problem rather than a training problem alone. That means multi-factor authentication, monitoring for the mailbox rules and forwarding that attackers set up early, alerting on unusual sign-ins, and a verification step for payment detail changes that does not rely on the email thread the request arrived in. AgileSECURE covers the technical side; the payment verification step is a process your firm owns, and we will help you write it.
Are we too small for this?
We work best with businesses of roughly 5 to 50 staff, and smaller teams growing into that range. If your firm is three people and everything is working, you probably do not need us yet, and we will say so. The point at which this becomes worthwhile is usually when technology decisions start waiting because nobody owns them.
How do we get started?
A discovery conversation. We look at what your firm runs on today, how it is managed, and where the gaps are, then set out what a structured managed service would look like. No obligation and no quote pushed at you in the first meeting.