Central to WISER (wide-impact cyber security risk framework), CYBERWISER.EU (cyber range for threat simulation), PANACEA (dynamic cyber risk assessment, cybersecurity ROI), and ECHO (cybersecurity competence network).
AON SPA INSURANCE & REINSURANCE BROKERS
Global insurance broker contributing cyber risk quantification, ROI modeling, and risk assessment expertise to European cybersecurity research consortia.
Their core work
Aon is a major global insurance and reinsurance broker headquartered in Milan, bringing deep expertise in risk assessment, risk management, and insurance economics to EU cybersecurity research. In H2020 projects, they contribute the insurance industry's perspective on quantifying cyber risk, calculating return on investment for cybersecurity measures, and developing dynamic risk assessment frameworks. Their role bridges the gap between technical cybersecurity solutions and the financial/insurance models needed to price and manage cyber risk in sectors like healthcare and critical infrastructure.
What they specialise in
PANACEA focused specifically on hospital and health infrastructure protection, combining security-by-design with human factors analysis.
CYBERWISER.EU built a cyber range platform for threat simulation and training; ECHO developed federated cyber ranges and cyberskills frameworks.
cyberwatching.eu served as a European observatory on cybersecurity and privacy, including certification scheme analysis.
RAGTIME applied risk-based approaches to multimodal transport infrastructure asset integrity management.
How they've shifted over time
Aon's H2020 involvement began in 2015 with broad cyber risk frameworks (WISER) and transport infrastructure risk (RAGTIME), reflecting a general risk management orientation. From 2018 onward, their focus sharpened significantly toward applied cybersecurity — cyber range training platforms, healthcare-specific cyber risk, ROI modeling for security investments, and European cybersecurity competence networks. The shift shows a clear move from general risk assessment toward becoming an insurance-sector voice in operational cybersecurity and sector-specific (especially healthcare) cyber risk quantification.
Aon is moving toward sector-specific cybersecurity risk quantification and ROI modeling, positioning itself as the insurance industry's bridge into applied cybersecurity research.
How they like to work
Aon participates exclusively as a consortium partner, never as coordinator, consistent with their role as a domain expert contributing insurance and risk expertise to technically-led projects. With 90 unique partners across 20 countries in just 6 projects, they operate in large, diverse consortia — typical of major EU cybersecurity initiatives. This suggests they are easy to integrate into large consortia and bring credibility from the financial services sector without seeking to drive the technical agenda.
Aon has collaborated with 90 distinct partners across 20 countries through 6 projects, indicating participation in large-scale EU cybersecurity consortia with broad European reach. Their network spans research institutions, cybersecurity firms, and public sector organizations across most of the EU.
What sets them apart
Aon brings something rare to cybersecurity consortia: the perspective of a global insurance broker that actually prices and underwrites cyber risk. While most consortium partners approach cybersecurity from a technical or policy angle, Aon can model the financial impact of cyber threats and quantify the ROI of security investments. For any project needing to demonstrate economic viability of cybersecurity solutions or connect technical outputs to insurance markets, Aon is a distinctive and credible partner.
Highlights from their portfolio
- WISERTheir largest funded project (EUR 560K), focused on building a wide-impact cyber security risk framework — directly aligned with Aon's core insurance risk expertise.
- PANACEADemonstrates Aon's move into sector-specific cybersecurity, applying dynamic risk assessment and ROI modeling to hospital and health infrastructure protection.
- ECHOSecond-largest funding (EUR 464K), part of building the European network of cybersecurity centres — positions Aon within the EU's strategic cybersecurity infrastructure.