网络保险作为一种风险缓解策略

The Geneva AssociationThe Geneva Association is the leading international insurance think tank for strategically important insurance and riskmanagement issues. The Geneva Association identifies fundamental trends and strategic issues where insurance playsa substantial role or which influence the insurance sector. Through the development of research programmes, regularpublications and the organisation of international meetings, The Geneva Association serves as a catalyst for progress inthe understanding of risk and insurance matters and acts as an information creator and disseminator. It is the leadingvoice of the largest insurance groups worldwide in the dialogue with international institutions. In parallel, it advances—in economic and cultural terms—the development and application of risk management and the understanding ofThe Geneva Association membership comprises a statutory maximum of 90 chief executive officers (CEOs) fromthe world’s top insurance and reinsurance companies. It organises international expert networks and managesdiscussion platforms for senior insurance executives and specialists as well as policymakers, regulators and multilateralEstablished in 1973, The Geneva Association, officially the International Association for the Study of InsuranceEconomics, is based in Zurich, Switzerland and is a non-profit organisation funded by its members.(IC)3The Interdisciplinary Consortium for Improving Critical Infrastructure Cybersecurity, (IC)3, is headquartered in theMIT Sloan School of Management. In collaboration with other parts of MIT, (IC)3is addressing the important needto improve the cybersecurity of critical infrastructure through an interdisciplinary research approach focused on thestrategic, managerial, and operational issues related to cybersecurity.(IC)3brings together thought leaders from industry and government with MIT faculty, researchers and students,conducting research in multiple relevant areas. (IC)3conducts a variety of meetings, workshops, conferences,and educational activities, and produces research reports which can be used by its members to improve criticalinfrastructure cybersecurity. Please visit us at http://ic3.mit.eduBCG PlatinionBCG Platinion, a company of The Boston Consulting Group, consists of cybersecurity experts, architects of IT solutions,implementation, and risk management experts that help achieve the right path forward for companies with complexitywho seek to deliver results. BCG Platinion connects with and extends BCG’s capabilities into implementation forIT, digital, cybersecurity, and risk as well as cybersecurity strategy. BCG Platinion drive projects through speedyimplementation at a lower cost with swiftness and executional certainty. BCG Platinion in North America is based inNew York. For more information, please visit bcgplatinion.com. www.genevaassociation.org@TheGenevaAssocuncertainty in the modern economy.organisations. Cyber Insurance as a RiskMitigation StrategyList of Authors:Michael Siegel, Principal Research Scientist, MIT Sloan School of Management and Research Directorof MIT-(IC)3Nadya Bartol, Associate Head of Cybersecurity Practice, BCG PlatinionJuan Jose Carrascosa Pulido, MBA Graduate Student, MIT Sloan School of ManagementStuart Madnick, Professor, MIT Sloan School of Management and Faculty Director of MIT-(IC)Michael Coden, Head of Cybersecurity Practice, BCG Platinion, and Associate Director, MIT-(IC)Mohammad Jalali, Research Scientist, MIT Sloan School of ManagementMichael Bernaski, Associate Director, The Boston Consulting Group 1Cyber Insurance as a Risk Mitigation Strategy33 Copyright 2018 - The Geneva Association, MIT, and The Boston Consulting Group. All rights reserved.The Geneva AssociationThe Geneva Association—International Association for the Study of Insurance EconomicsTalstrasse 70, CH-8001 ZurichEmail: secretariat@genevaassociation.org | Tel: +41 44 200 49 00 | Fax: +41 44 200 49 99 2www.genevaassociation.org@TheGenevaAssocCyber Insurance as a Risk Mitigation StrategyCover page—Kris Tan, Shutterstock. April 2018Photo credits: ContentsAcknowledgementsForewordExecutive summary1. Introduction2. Methodology3. General challenges in the cyber insurance market3.1 The unique nature of cyber risk3.2 Accumulation risk3.3 Limited data availability and information sharing3.4 Impact of cyber regulation3.5 Technology and cyber insurance4. The insurance role in cyber risk transfer4.1 The expanding role along the value chain4.2 Coordinating the cyber insurance ecosystem4.3 Improving customers’ cybersecurity5. The growing cyber insurance market5.1 Differences in regional markets5.2 Understanding the future of the market6. Final wordsReferences 3Cyber Insurance as a Risk Mitigation Strategy456910111212141516171820202424252728 4www.genevaassociation.orgAcknowledgementsThis paper has been prepared in collaboration with the MIT Sloan School of Management and the Boston ConsultingGroup. We have profited greatly from discussions with