Centro de Documentación de Fundación MAPFRE - Reducing informational disadvantages to improve cyber risk management

Notes: Sumario: Effective cyber risk management should include the use of insurance not only to transfer cyber risk but also to provide incentives for insured enterprises to invest in cyber self-protection. Research indicates that asymmetric information, correlated loss, and interdependent security issues make this difficult if insurers cannot monitor the cybersecurity efforts of the insured enterprises. To address this problem, this paper proposes the Cyber Risk Scoring and Mitigation (CRISM) tool, which estimates cyberattack probabilities by directly monitoring and scoring cyber risk based on assets at risk and continuously updated software vulnerabilities. CRISM also produces risk scores that allow organisations to optimally choose mitigation policies that can potentially reduce insurance premiumsRelated records: En: Geneva papers on risk and insurance : issues and practice. - Geneva : The Geneva Association, 1976- = ISSN 1018-5895. - 02/04/2018 Volumen 43 Número 2 - abril 2018 , p. 224-238Materia / lugar / evento: Gerencia de riesgos Ciberriesgos Ciberseguridad Empresas de seguros Ciberataques Prevención de riesgos Seguro de ciberriesgos Mercado de seguros Identificación de riesgos Seguridad informática Otros autores: Shetty, Sachin
Other categories: 7

‌ See issue detail