How ITIL Could Improve Assurant’s Customer Service

Welcome back to Richardson’s Rubicon, I’m your host, John Richardson, and today we’re delving into something a little different. It’s going to relate to my IT expertise, but resonates in everyday life, specifically dealing with service desks. What’s making today’s episode worth your listen is an exasperating experience I recently encountered with my teen son’s mobile phone insurance claim. This ordeal with Assurant – the company in question – highlighted some crucial lessons on customer service, communication and data security. So join me as I take you through the tale of vexing service desk interactions, password-protected files and unencrypted PDF’s. Who knows, maybe you could take away a few pointers that could potentially improve similar experiences for you, or even suggest improvements to companies you interact with. Stay tuned for this exploration, right here on Richardson’s Rubicon.

More details here:

From: GiffGaff (REDACTED)
Sent: Friday, October 25, 2024, 4:44 PM
To: Assurant (REDACTED)
Subject: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

CAUTION: This email contains password-protected attachments. Do not open the attachments unless you recognize the sender and know the contents are safe.

You recently requested personal assistance from our online Support Centre. Below is a summary of your request and our response.

Subject: Proof of Usage for John REF: XXXXX Redacted
Response By Email (C from the GiffGaff team) (25/10/2024 04:43 PM)

Good Evening,

C here at the GiffGaff team.

Please find a proof of usage for our member ‘John’ attached to this email.

Claim reference number: XXXXX Redacted

Kind regards,
C at the GiffGaff team


From: Assurant (REDACTED)
Sent: Monday, October 28, 2024, 2:42 PM
To: John (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Good afternoon,

Thank you for your email.

We need this information to be sent in PDF format.

We are not able to open the attachment as this is password-protected.

Kind Regards,
A-L
The Claims Team


From: John (REDACTED)
Sent: Tuesday, October 29, 2024, 10:34 AM
To: Assurant (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

This is what I received from GiffGaff after sending them your message:

29 Oct 2024 10:21

Hi John,

I’m C with the GiffGaff team; C isn’t available right now.

Please let your insurers know that the password is: (REDACTED)

For security reasons, we cannot send an unencrypted PDF. We can only send documents in a zipped, password-protected format.


From: Assurant (REDACTED)
Sent: Tuesday, October 29, 2024, 2:15 PM
To: John (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Good afternoon,

Thank you for your email.

We need this information to be sent in PDF format. We cannot access password-protected documents.

Kind Regards,
O
The Claims Team


From: John (REDACTED)
Sent: Tuesday, October 29, 2024, 2:25 PM
To: Assurant (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Can you send me the file they sent you, and I’ll convert it myself?


From: Assurant (REDACTED)
Sent: Tuesday, October 29, 2024, 3:37 PM
To: John (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Good afternoon,

Thank you for your email.

We would be unable to send this document back to you. Please can you speak to your network provider regarding this documentation.

Kind Regards,
A-L
The Claims Team


From: John (REDACTED)
Sent: Tuesday, October 29, 2024, 3:49 PM
To: Assurant (REDACTED)
Cc: Assurant (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

I am escalating this.


From: Assurant (REDACTED)
Sent: Tuesday, October 29, 2024, 5:11 PM
To: John (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Hello,

Thank you for your email. If you wish to discuss this issue, can I ask that you call us, and a member of our Customer Services team will be able to assist you further. Call us on (REDACTED), Monday to Friday between 8.00am and 8.00pm, or on Saturday and Sunday including Public Holidays between 9.00am and 6.00pm.

Kind regards,
O
The Claims Team


From: John (REDACTED)
Sent: Tuesday, October 29, 2024, 8:29 PM
To: Assurant (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

I have written everything I can here. I have also lodged a similar complaint with GiffGaff.

Why your respective CISOs don’t use a proper secure email transport service is puzzling as it is the obvious solution. As is scanning attachments to ensure safety.

What you are expecting GiffGaff to do is to send GDPR information over insecure channels. I’m not surprised they don’t want to do that. What surprises me is that you insist upon it without offering alternatives.

I feel I may need to report this to the Information Commissioners Office in due course.

Regards,
John


From: Assurant (REDACTED)
Sent: Wednesday, October 30, 2024, 10:13 AM
To: John (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

Good afternoon,

Thank you for your email.

If you would like to raise this further, we can arrange a callback with our further support team.

Please let us know if you would like to raise this further.

Kind Regards,
A-L
The Claims Team


From: John (REDACTED)
Sent: Wednesday, October 30, 2024, 10:48 AM
To: Assurant (REDACTED)
Subject: RE: Proof of Usage for John REF: XXXXX Redacted [Incident: XXXXX Redacted]

My number is (REDACTED) – I will be available from 1pm until 4pm

Here’s an analysis of each key timeline event, with an explanation of how ITIL principles could have improved the service and specific faults in Assurant’s processes:

October 25, 2024 – GiffGaff sends “Proof of Usage”

Fault: Assurant’s process lacks clear guidance on acceptable formats for document submissions and an alternative secure method for GDPR-compliant communication. ITIL Improvement: According to Service Design principles, Assurant should define a process for securely receiving sensitive customer information. An established procedure could offer customers a secure upload portal, bypassing email limitations and preventing confusion. This is particularly important for compliance and customer trust, aligning with Service Level Management to set clear, secure document submission standards that meet data protection regulations.

October 28, 2024 – Assurant rejects the document

Fault: Assurant rejects the document but doesn’t provide a secure alternative or a structured response for handling protected files. ITIL Improvement: Problem Management could address recurring issues with file submission. Once a password-protected file is received, the support team should have protocols for either manually handling these files or guiding customers to upload them through a secure channel. Knowledge Management would also be beneficial here, ensuring representatives have access to guidelines on sensitive document handling, reducing unnecessary communication loops and confusion.

October 29, 2024 – John provides the password

Fault: Assurant’s system lacks the capability to reliably receive and store password-protected documents, a security standard expected for handling sensitive information. ITIL Improvement: Service Level Management could establish clearer guidelines for what document formats are supported, and Information Security Management should ensure systems can securely process such documents. A service desk representative should acknowledge receipt and update the customer if a document cannot be opened due to restrictions, ideally directing them to a secure alternative. This approach would build trust by showing Assurant prioritizes both customer service and data security.

October 29, 2024 – Assurant reiterates password policy

Fault: Assurant’s response creates confusion, with no consistent answer about handling password-protected files, indicating a lack of internal communication and a breakdown in process clarity. ITIL Improvement: Continual Service Improvement (CSI) could regularly evaluate document-handling procedures, particularly for secure information exchange. A clearly documented Knowledge Management article accessible to staff would prevent contradictory responses. Assurant should have an established incident management escalation path for cases involving secure document exchange, leading to faster, uniform responses.

October 29, 2024 – Escalation

Fault: John’s escalation reveals both dissatisfaction and an unresolved security gap in Assurant’s processes. Lack of a designated, secure pathway forces John to seek GDPR compliance elsewhere, with frustration growing over the perceived laxness in Assurant’s data protection. ITIL Improvement: Customer Feedback Management, an aspect of CSI, could channel customer feedback on security requirements into actionable service improvements. ITIL’s Service Design suggests identifying these feedback loops for ongoing security issues to create a proactive solution, like a secure online submission portal, making it easier for the company to protect customer data without repeated interventions.

October 30, 2024 – Assurant offers a callback

Fault: The callback offer comes across as unhelpful and fails to resolve the issue efficiently. Assurant’s inability to track John’s specific needs or clarify the issue during initial contacts wastes his time and doesn’t contribute to resolution. ITIL Improvement: Incident Management could ensure support requests are linked to specific requirements (e.g., callback offers) in the customer’s file, preventing unnecessary rework. Incident Management guidelines emphasize single-contact resolution; if John’s case was handled with more coordination, he wouldn’t need repetitive, follow-up callbacks. A proper escalation path would streamline this process by getting him directly to someone who could offer a secure solution.

November 1, 2024 – Assurant phones John but disconnects

Fault: The failed call and subsequent need for John to call back indicates a poor follow-through system, wasting customer time and escalating frustration. ITIL Improvement: ITIL Incident Management could establish protocols for ensuring customers aren’t left with open issues due to a call disconnect. Staff should have ensured callback continuity, possibly with callback scheduling and prioritizing pending issues, minimizing customer effort to resolve the matter.

November 1, 2024 – Clarification and New Inconsistencies

Fault: Call handler inconsistencies in document requirements and conflicting information about password-protection policies indicate a lack of process clarity. ITIL Improvement: ITIL’s Service Knowledge Management System (SKMS) would have provided representatives with uniform, documented standards, especially for document security and required claim documentation. By integrating Knowledge Management into service training, representatives would give customers consistent, reliable information, reducing frustration and fostering transparency.

November 2, 2024 – John follows up and receives the form

Fault: John’s follow-up effort reflects an ongoing issue with Assurant’s communication and tracking systems, indicating potential problems in workflow management. ITIL Improvement: Change Management could track and flag cases with unresolved tasks like pending document forms, which Assurant should proactively monitor and fulfil. A CSI review of service response times and workflow completion would also highlight areas for improvement, particularly in handling case-specific follow-ups and reducing the customer’s burden in seeing their case through to resolution.

Summary

Each stage of the interaction reflects opportunities for Assurant to improve customer satisfaction and security compliance using ITIL principles, particularly in Knowledge Management, Incident Management, Problem Management, and Continual Service Improvement. Implementing these practices could address recurring issues, clarify support processes, and enhance the customer experience by minimizing friction and reinforcing data security standards.

About the Author
Retired information security and IT governance specialist, certified ITIL Expert. Now a podcaster, beekeeper, speculative fiction writer, and reluctant activist. Often found dissecting policy, interrogating imagined worlds, or being quietly disappointed by reality. Equal parts pragmatist and mischief-maker. Occasionally insightful, frequently an idiot, always curious.
Cookie Consent with Real Cookie Banner