k88nFi

Recommendations

Info

CYBER GAPS IN TRADITIONAL INSURANCE PRODUCTS AND THE AVAILABILITY OFSTANDALONE CYBER INSURANCE PRODUCTSOne likely source of the barrier for insurers is the complexity of their offerings. Traditional insurance productshave not been designed to protect clients against cyber risks. In addition, underwriters of traditional insurancebusiness lines have, in some cases, reacted to the emergence of this new class of risk by introducing cyberexclusions. The result for clients is a complex picture, with a mix of implicit and explicit cover as well as a numberof exclusions to contend with. It makes it an exercise in and of itself to ascertain the true level of cover for anygiven cyber-risk scenario.FIGURE 8: EXAMPLES OF TYPICAL CYBER EXCLUSIONS AND GAPS IN TRADITIONAL INSURANCE POLICIESINSURANCEPRODUCTMAIN TYPE OF LOSSES COVERED(PRIMARY OBJECTIVE OF THE COVER)POTENTIAL GAP OF COVERFOR CYBER PERILSProperty Physical asset damage (first-party). ••Exclusions removing cyber attacks and explicitcoverage triggers for physical-asset damage.••Damage to software and data not covered(as deemed intangible form of property).BusinessinterruptionGeneralliabilityErrors andomissions/professionalindemnityLost revenues and additional cost incurred(first-party).Third-party liabilities for physical propertydamage, bodily injury, and advertisinginjury (liability claims arising frompublished content, including violationof privacy).Third-party liabilities arising from theperformance of professional services.••Traditional policies are not triggered by cyberattacks that do not cause physical damage.••Exclusions of unauthorised disclosure ofpersonal information.••Cover may be restricted to liability claimsfrom customers only, hence why claims fordisclosure of employees’ data are often notcovered.• • Several exclusions might apply (for example,computer virus transmission).In order to respond to this gap, the insurance market has developed a dedicated product line that addressesmany of the key risks faced by clients. Clients can purchase cyber-specific cover in the form of extensions totraditional policies, or as standalone cyber policies.18 • UK Cyber Security
Figure 9 describes the level of insurability of different risks among the participating insurers. Insurability is thencompared against the risk exposure deriving from the expected frequency and severity for each risk.FIGURE 9: INSURABILITY AND EXPOSURE FOR DIFFERENT CYBER RISKSCompletelyinsurable(D)Cyber extortionSoftware/data damage(C)Crime/fraud(G) (E)Privacy event(F)Network security liabilityINSURABILTYInsurable withconstraints(I)Physical asset damageNetwork business interruption(B)(H) Reputational loss(A)IP theftUninsurable(J)Death and bodily injuryLow* Combined score for frequency and severity (large organisations).EXPOSURE (RELATIVE TO OTHER RISKS) *HighThe Role of Insurance in Managing and Mitigating the Risk • 19
Page 1 and 2: MARCH 2015UK CYBER SECURITYTHE ROLE
Page 3 and 4: FOREWORDThe cyber threat remains on
Page 5 and 6: 1 INTRODUCTIONCyber attacks against
Page 7 and 8: 1. HELPING FIRMS GET TO GRIPS WITH
Page 9 and 10: 3. HELPING LONDON TO BE A GLOBAL CE
Page 11 and 12: The point of attack outlines the vu
Page 13 and 14: 4 BUSINESSES AND THEIREXPOSURESRISK
Page 15 and 16: Physical losses are a growing conce
Page 17 and 18: RISK GOVERNANCE AND RISK QUANTIFICA
Page 19: 5 INSURANCE SOLUTIONS FORCYBER RISK
Page 24 and 25: PRICING AND DATA AVAILABILITYAn ana
Page 26 and 27: FIGURE 12: COMPARISON OF CYBER INSU
Page 28 and 29: 7 RECOMMENDATIONSThis report has an
Page 30 and 31: CYBER SECURITY INFORMATION SHARING

k88nFi

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?