Content Analysis of Cyber Insurance Policies: How Do Carriers Write Policies and Price Cyber Risk?
Content Analysis of Cyber Insurance Policies: How Do Carriers Write Policies and Price Cyber Risk?
复制标题
网络保险保单内容分析：运营商如何制定保单并定价网络风险？
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Therese Jones
中科院分区：
文献类型：
--
作者：
Sasha Romanosky;Lillian Ablon;A. Kuehn;Therese Jones
数据泄露和安全事件已经变得司空见惯，每年发生数千起，其中一些造成了数亿美元的损失。因此，针对这些损失的保险市场(又名网络保险)在过去10年里迅速增长。然而，人们对这些政策和风险评估背后的机制知之甚少。虽然关于网络保险的理论文献很多，但公开的实践信息很少。例如，网络保险保单实际承保了哪些损失，排除了哪些损失？哪些因素用于计算保费，现有的承保方法如何反映技术风险率？在这项研究中，我们收集和分析了提交给州保险专员的100多份网络保险保单。通过分析这些保单，我们首次对网络保险的承保流程进行了分析，并揭示了保险公司如何理解和定价网络风险。
Data breaches and security incidents have become commonplace, with thousands occurring each year and some costing hundreds of millions of dollars. Consequently, the market for insuring against these losses (aka cyber insurance) has grown rapidly in the past decade. However, very little is known about these policies and the mechanisms behind the risk assessments. While there exists much theoretical literature about cyber insurance, very little practical information is publicly available. For example, what losses are actually covered by cyber insurance policies, and what are the exclusions? What factors are used to compute the premiums, and how do existing underwriting approaches reflect the technical rate of risk? In this research, we collect and analyze over 100 cyber insurance policies filed with state insurance commissioners. By analyzing these policies, we provide the first-ever analysis of the underwriting process for cyber insurance and uncover how insurance companies understand and price cyber risks.