Company record
Who leads security at Brown & Brown
The most recent move CISO Tribune has on record at Brown & Brown was announced on June 1, 2023: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
What Brown & Brown tells the SEC
Its fiscal 2025 Form 10-K, filed February 12, 2026, carries an Item 1C cybersecurity disclosure that describes a chief information security officer reporting to the Company's chief security officer, with oversight by the audit committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since June 1, 2023 · 1 recorded move · every claim links to a sourced record · Updated
Where Brown & Brown appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 12, 2026
About Brown & Brown
CISO Tribune's Leadership Bench files Brown & Brown under Financial Services and North America. The SEC classifies it under standard industrial classification 6411, Insurance agents, brokers & service, and EDGAR lists its ticker as BRO. The Wire has one security-leadership move at Brown & Brown on record, announced on June 1, 2023.
What Brown & Brown's 10-K says about security governance
Brown & Brown's fiscal 2025 Form 10-K, filed February 12, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Reporting line: the chief information security officer reports to the Company's chief security officer.
“The Company's chief information security officer, under the direction of Company's chief security officer, is responsible for developing and implementing our information security program.”
Board oversight: the audit committee.
“The audit committee of our board of directors, composed entirely of independent directors, is responsible for organization-wide oversight regarding information security and reports to the full board of directors.”
Frameworks and standards the filing names: SOC 2.
Experience of the security leadership, as the filing states it:
“With more than 25 years of experience, our chief information security officer previously served as the chief information security officer of a highly regulated publicly traded company, where he developed and implemented robust security controls, standards, policies and procedures aligned with measurable industry standards.”
Material incidents: the filing states none.
“We face a number of cybersecurity risks in connection with our business and have experienced cybersecurity incidents, such as malware infections, phishing campaigns, ransomware and vulnerability exploit attempts, which to date have not had a material impact on our business strategy, results of operations or financial condition.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security leaders of Brown & Brown on our record
Security chiefs at other Financial Services organizations
Other organizations CISO Tribune files under Financial Services with a named security chief on record: those in North America first, in alphabetical order from Brown & Brown onward.
Candescent: Thomas Hill, Chief Information Security Officer.
Coinbase: Michael Sikorski, Chief Information Security Officer.
DCM Services: Curtis Rebelein, Chief Information Security Officer.
Depository Trust Clearing Corporation (DTCC): Laura Deaner, Chief Information Security Officer (CISO).
Envestnet: Rich Friedberg, Chief Information Security Officer (CISO).
EP Wealth Advisors: Kate Middagh, Chief Information Security Officer.
Equifax: Jeremy Koppen, Chief Information Security Officer (CISO).
Farmers & Merchants Bank of Long Beach: Mike Brown, Chief Information Security Officer.
Questions CISOs ask about Brown & Brown
- Who are the security chiefs at other Financial Services organizations?
- On CISO Tribune's record they include Thomas Hill at Candescent, Michael Sikorski at Coinbase, Curtis Rebelein at DCM Services and Laura Deaner at Depository Trust Clearing Corporation (DTCC).
- Who does the security chief of Brown & Brown report to?
- Brown & Brown's fiscal 2025 Form 10-K, filed February 12, 2026, says its chief information security officer reports to the Company's chief security officer.
- Which board body oversees cybersecurity at Brown & Brown?
- Brown & Brown's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the audit committee.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.