Centro de Documentacion de Fundación MAPFRE - Reducing informational disadvantages to improve cyber risk management

MAP20180014673

Reducing informational disadvantages to improve cyber risk management / Sachin Shetty... [et al.]

Sumario: Effective cyber risk management should include the use of insurance not only to transfer cyber risk but also to provide incentives for insured enterprises to invest in cyber self-protection. Research indicates that asymmetric information, correlated loss, and interdependent security issues make this difficult if insurers cannot monitor the cybersecurity efforts of the insured enterprises. To address this problem, this paper proposes the Cyber Risk Scoring and Mitigation (CRISM) tool, which estimates cyberattack probabilities by directly monitoring and scoring cyber risk based on assets at risk and continuously updated software vulnerabilities. CRISM also produces risk scores that allow organisations to optimally choose mitigation policies that can potentially reduce insurance premiums

En: Geneva papers on risk and insurance : issues and practice. - Geneva : The Geneva Association, 1976- = ISSN 1018-5895. - 02/04/2018 Volumen 43 Número 2 - abril 2018 , p. 224-238

1. Gerencia de riesgos . 2. Ciberriesgos . 3. Ciberseguridad . 4. Empresas de seguros . 5. Ciberataques . 6. Prevención de riesgos . 7. Seguro de ciberriesgos . 8. Mercado de seguros . 9. Identificación de riesgos . 10. Seguridad informática . I. Shetty, Sachin .