Название: Embracing Risk: Cyber Insurance as an Incentive Mechanism for Cybersecurity
Автор: Mingyan Liu
Издательство: Morgan & Claypool
Серия: Synthesis Lectures on Learning, Networks, and Algorithms
Год: 2021
Страниц: 145
Язык: английский
Формат: pdf (true)
Размер: 10.1 MB

This book provides an introduction to the theory and practice of cyber insurance. Insurance as an economic instrument designed for risk management through risk spreading has existed for centuries. Cyber insurance is one of the newest sub-categories of this old instrument. It emerged in the 1990s in response to an increasing impact that information security started to have on business operations. For much of its existence, the practice of cyber insurance has been on how to obtain accurate actuarial information to inform specifics of a cyber insurance contract. As the cybersecurity threat landscape continues to bring about novel forms of attacks and losses, ransomware insurance being the latest example, the insurance practice is also evolving in terms of what types of losses are covered, what are excluded, and how cyber insurance intersects with traditional casualty and property insurance. The central focus, however, has continued to be risk management through risk transfer, the key functionality of insurance.

The goal of this book is to shift the focus from this conventional view of using insurance as primarily a risk management mechanism to one of risk control and reduction by looking for ways to re-align the incentives. On this front we have encouraging results that suggest the validity of using insurance as an effective economic and incentive tool to control cyber risk. This book is intended for someone interested in obtaining a quantitative understanding of cyber insurance and how innovation is possible around this centuries-old financial instrument.

There are many parties to an insurance policy: the enterprise/insured purchasing it, the underwriter selling it, the broker trying to match a buyer and a seller, the reinsurer providing insurance for the underwriter, and additional parties such as auditors and providers of risk and forensic analysis, among others. This book takes an outsider’s holistic view of the most important part of this eco-system, i.e., the insured and the insurer and how their relationship impacts the state of cybersecurity for all. For this reason, we almost always consider the welfare of both parties, as well as a more objective measure of security. For simplicity of presentation, we will ignore the existence of the broker and roll into one the roles of insurer and reinsurer.