Cyber insurance premiums amount to just a fraction of total losses from cyber attacks, with estimates putting the protection gap at 90%
Armonk, NY (Nov. 7, 2022) – The cyber risk landscape is rapidly evolving and cyber attacks have increased. However, most businesses and households are uninsured or significantly under-insured. Cyber insurance premiums amount to just a fraction of total losses from cyber attacks, with estimates putting the protection gap at 90%. There is much work to do to ensure sufficient risk protection is available to make society more resilient to cyber risk, and this effort will require collaboration between businesses, the insurance industry and government.
A first requirement is to improve data quality and modelling for more accurate pricing. Cyber risks are difficult to quantify due to a lack of standardised data and modelling constraints, and also because of the high degree of uncertainty around expected losses and potential for loss accumulation. Future risks are typically inferred based on backward-looking data, but this approach is of limited value in the rapidly changing environment of cyber risk. Re/insurers must also invest in the cyber workforce, to help strengthen the actuarial, technical and forensic skills needed for the underwriting and claims management cycles.
Second, re/insurers should update policy language for clarity and consistency, with more standardisation around exclusion clauses and terms and conditions. Exposures to hard-to-insure systemic risk scenarios remain a barrier for industry capacity. Stakeholders have taken steps to fix some of these issues, but factors such as attribution of cyber events remain a core problem. Clarifying the scope of coverage can lead to increased cyber capacity.
Finally, there is scope for new types of public-private risk sharing mechanisms. A public-private partnership insurance scheme where coverage of systemic risks such as threats to critical infrastructure is split between insurers and a government(s)-backed fund, is one option. Another is to tap into alternative capital, such as by developing a market for cyber-insurance-linked securities.
To learn more, get the publication from Swiss Re.
About Swiss Re
The Swiss Re Group is one of the world’s leading providers of reinsurance, insurance and other forms of insurance-based risk transfer, working to make the world more resilient. It anticipates and manages risk – from natural catastrophes to climate change, from ageing populations to cyber crime. The aim of the Swiss Re Group is to enable society to thrive and progress, creating new opportunities and solutions for its clients. Headquartered in Zurich, Switzerland, where it was founded in 1863, the Swiss Re Group operates through a network of around 80 offices globally. For more information, please visit www.swissre.com.
SOURCE: Swiss Re
