We’re also in the process of implementing a new claims system within the claims organization. We're doing that with a systems integrator and tight partnership between us and the business. That is going well. While it’s still early, I don't anticipate significant adjustments for now.
That's great. One key objective that I know you've been pushing forward over the last couple of years is a strategic modernization of your backend systems. I’m keenly aware of the challenges involved with those efforts as well. You can't just snap your fingers, and everything is modernized overnight. Can you talk about that journey?
Like most insurance companies that have been around for a while we have a lot of legacy systems. We’ve been on a modernization journey for some time and have made great progress, but at different rates and on different scales. Some of the efforts are quite large and take multiple years and substantial investment — like replacing the policy admin system, claim system or installing a CRM platform. Other efforts we’ve modernized are more straightforward. We’ve added new data centers in a co-location approach and were able to do that within a couple of years. We've also refreshed our security infrastructure within the data center. While we've made great progress in many areas, other areas are taking a little bit longer.
Indeed, that is one of the biggest challenges — that you can't do it all at once. You need to be patient and have discipline in your execution. The good news is that with our strong alignment between business and IT, we’re able to gain alignment to invest in the future and do an excellent job at lifecycle management.
You also mentioned security. We know that security continues to be a top concern for CIOs. With substantial legacy technology and complex infrastructure and mission-critical systems, data security presents a difficult challenge. Can you talk through your approach and perhaps share some of the practices you’ve employed to bolster your security readiness?
First, it starts with corporate and enterprise commitment. Certainly, we have that. One of the things that I've been doing since I've been here is really working to build a strong security team. I value diversity. So, as I've been building my team, I've been building a diverse team in all aspects — from location, industry, experience, and technology — and I do that with all of my teams. While we have been maturing our security practices and leveraging traditional best practices, I’ve also been bringing in expertise from the outside with new ideas. People play a vital role, so I’ve been encouraging our team to continue to grow and learn.
As part of our ongoing maturity assessments, we've refreshed a lot of legacy security infrastructure with newer technology that meet the needs of the changing security landscape. We have a three-year plan that defines how and where we want to grow our security technology.