Embracing and controlling risk dependency in cyber-insurance policy underwriting
Autor: | Mingyan Liu, Mohammad Mahdi Khalili, Sasha Romanosky |
---|---|
Rok vydání: | 2019 |
Předmět: |
050208 finance
Actuarial science Social Psychology Computer Networks and Communications 05 social sciences 020206 networking & telecommunications 02 engineering and technology 0502 economics and business Political Science and International Relations 0202 electrical engineering electronic engineering information engineering Computer Science (miscellaneous) Cyber-Insurance Business Safety Risk Reliability and Quality Law Underwriting Dependency (project management) |
Zdroj: | Journal of Cybersecurity. 5 |
ISSN: | 2057-2093 2057-2085 |
Popis: | This article highlights how cyber risk dependencies can be taken into consideration when underwriting cyber-insurance policies. This is done within the context of a base rate insurance policy framework, which is widely used in practice. Specifically, we show that there is an opportunity for an underwriter to better control the risk dependency and the risk spill-over, ultimately resulting in lower overall cyber risks across its portfolio. To do so, we consider a Service Provider (SP) and its customers as the interdependent insurer’s customers: a data breach suffered by the SP can cause business interruption to its customers. In underwriting both the SP and its customers, we show that the insurer can increase its profit by incentivizing the SP (through a discount on its premium) to invest more in security, thereby decreasing the chance of business interruption to the customers, and increasing social welfare. For comparison, we also consider a scenario where the insurer underwrites only the SP’s customers (but not the SP), and receives compensation from the SP’s insurance carrier when losses are attributed to the SP. We show how the insurer’s best strategy is to underwrite both the SP and its customers. We use an actual cyber-insurance policy and claims data to calibrate and substantiate our analytical findings. |
Databáze: | OpenAIRE |
Externí odkaz: |