The worst thing a business can do is underestimate the power and the importance of cybersecurity tools and procedures to stay protected. And that’s where opportunity lies for ITSPs—to help organisations align to both business and risk management frameworks, according to Brad Fraser, founder and CEO of Infoprotect UK.
But that takes going beyond compliance and requires building cyber into your culture and strategy. It’s a commitment that Infoprotect UK takes seriously—and one noticed by peers.
Fraser’s pursuit of collaboration, governance and continuous improvement was a key reason why GTIA member voters selected Fraser to receive the 2025 GTIA UK & Ireland Advancing Cybersecurity Leadership award, along with Kristian Wright, CEO of enhanced.io. The two were feted for their outstanding commitment, leadership, passion and professionalism in support of GTIA Cybersecurity Programs through active engagement and thought leadership.
We asked Fraser what cyber challenges ITSPs face in the market and advice for others to stay protected. Here’s what he had to say.
What does the GTIA UK & Ireland Cybersecurity Leadership Award mean to you?
It’s a deeply meaningful recognition of years spent helping businesses and ITSPs build real, measurable cyber resilience. For me, this award isn’t about personal achievement alone, but about shining a light on how aligning cybersecurity, governance and insurance creates tangible value. It reinforces the importance of collaboration and continuous improvement across the industry.
What makes you such a tireless cybersecurity advocate for ITSPs?
ITSPs operate at the coalface of risk, often with limited resources, yet their actions directly impact countless organisations. My passion lies in helping them see cybersecurity not as an add-on but as an integrated business function. By mentoring, sharing frameworks and supporting initiatives like the GTIA Cybersecurity Trustmark, I aim to raise collective standards.
What is the biggest security challenge/risk ITSPs face today?
A false sense of security that comes from relying on tools alone. Many ITSPs underestimate the power of foundational governance, regular risk assessments and cultural change. Without aligning cybersecurity to business and risk management frameworks, gaps remain—and those are exactly where threat actors strike hardest.
How are you working with GTIA to address those issues?
By actively engaging with GTIA programs, including promoting the GTIA Cybersecurity Trustmark, I help ITSPs adopt practical frameworks like NIST and CIS. We focus on turning governance, risk and compliance into everyday habits—so security isn’t just a technical conversation but a board-level, business resilience strategy that clients and insurers value.
What advice do you have for ITSPs trying to up their cybersecurity game?
Go beyond compliance—build cybersecurity into your culture and strategy. Embrace recognised frameworks, measure your maturity honestly and make risk part of board discussions. Finally, aim for the GTIA Cybersecurity Trustmark: It’s not just a badge but a pathway to demonstrating trust, accountability and genuine commitment to continuous improvement.
See the full list of 2025 UK & Ireland Spotlight Award Winners.
