When to Treat Security Risks with Cyber Insurance

摘要: Transferring security risk to a third party through cyber insurance is an unfamiliar playing field for lot of organisations, and therefore many hesitate make such investments. Indeed, there general need affordable practical ways performing quantification when determining treatment options. To address this concern, we propose lightweight, data-driven approach organisations evaluate their own insurance. A generic model, populated with available industry averages, used as starting point. Individual can instantiate model obtain profile themselves related relevant threats. The then together estimate the benefit basis comparing offers from different providers.