The Effect of Cyber Risk Management Services in Insurance Policies

Abstract

Given the continuing growth in both the complexity and severity of cyber risk, a fundamental rethink of cyber risk management has become an issue of paramount importance, particularly as insurance firms are now providing both cyber risk management services and cyber risk insurance coverage. In this study, we set out to provide analyses of the prevailing cyber risk levels in various industries using the “Chronology of Data Breaches” database and then go on to assess the overall benefits of cyber risk insurance coverage. Our results reveal that compared to other industries, insurance firms exhibit superior cyber risk management. Regardless of internal and external cyber risk, insurance companies retain the lowest cyber losses. We further provide evidence to show that cyber risk insurance policies alone cannot effectively cover the potentially extreme cyber risk losses for most industries. However, the situation can be improved by implementing cyber risk management services provided by insurance firms. Insurance firms may need to provide an efficient cyber risk management system to lower the frequency and severity of extreme events.

Citation

Chen, Y.-C. and Leong, Y.-Y. (2022), "The Effect of Cyber Risk Management Services in Insurance Policies", Lee, C.-F. and Yu, M.-T. (Ed.) Advances in Pacific Basin Business, Economics and Finance (Advances in Pacific Basin Business, Economics and Finance, Vol. 10), Emerald Publishing Limited, Leeds, pp. 159-172. https://doi.org/10.1108/S2514-465020220000010008