Conference item
The data that drives cyber insurance: a study into the underwriting and claims processes
- Abstract:
- Cyber insurance is a key component in risk management, intended to transfer risks and support business recovery in the event of a cyber incident. As cyber insurance is still a new concept in practice and research, there are many unanswered questions regarding the data and economic models that drive it, the coverage options and pricing of premiums, and its more procedural policy-related aspects. This paper aims to address some of these questions by focusing on the key types of data which are used by cyber-insurance practitioners, particularly for decision-making in the insurance underwriting and claim processes. We further explore practitioners' perceptions of the challenges they face in gathering and using data, and identify gaps where further data is required. We draw our conclusions from a qualitative study by conducting a focus group with a range of cyber-insurance professionals (including underwriters, actuaries, claims specialists, breach responders, and cyber operations specialists) and provide valuable contributions to existing knowledge. These insights include examples of key data types which contribute to the calculation of premiums and decisions on claims, the identification of challenges and gaps at various stages of data gathering, and initial perspectives on the development of a pre-competitive dataset for the cyber insurance industry. We believe an improved understanding of data gathering and usage in cyber insurance, and of the current challenges faced, can be invaluable for informing future research and practice.
- Publication status:
- Published
- Peer review status:
- Peer reviewed
Actions
Access Document
- Files:
-
-
(Preview, Accepted manuscript, 504.4KB, Terms of use)
-
- Publisher copy:
- 10.1109/CyberSA49311.2020.9139703
- Publication website:
- https://ieeexplore.ieee.org/xpl/conhome/9136832/proceeding
Authors
- Publisher:
- IEEE
- Host title:
- 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA)
- Publication date:
- 2020-07-14
- Acceptance date:
- 2020-04-16
- Event title:
- International Conference on Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) 2020
- Event series:
- CyberSA
- Event website:
- https://www.c-mric.com/csa2020
- Event start date:
- 2020-06-15
- Event end date:
- 2020-06-19
- DOI:
- EISBN:
- 978-1-7281-6690-2
- ISBN:
- 978-1-7281-6691-9
- Language:
-
English
- Keywords:
- Pubs id:
-
1113027
- Local pid:
-
pubs:1113027
- Deposit date:
-
2020-06-18
Terms of use
- Copyright holder:
- Nurse et al.
- Copyright date:
- 2020
- Notes:
- Presented at the CyberSA 2020 (Machine Learning for insight in Cyber Security and Situational Awareness) Conference, 15-19 June 2020.
If you are the owner of this record, you can report an update to it here: Report update to this record