网络风险与网络风险保险的十大关键问题

The Geneva AssociationThe Geneva Association is the leading international insurance think tank for strategically important insurance and riskmanagement issues. The Geneva Association identifies fundamental trends and strategic issues where insurance playsa substantial role or which influence the insurance sector. Through the development of research programmes, regularpublications and the organisation of international meetings, The Geneva Association serves as a catalyst for progress inthe understanding of risk and insurance matters and acts as an information creator and disseminator. It is the leadingvoice of the largest insurance groups worldwide in the dialogue with international institutions. In parallel, it advances—in economic and cultural terms—the development and application of risk management and the understanding ofThe Geneva Association membership comprises a statutory maximum of 90 chief executive of officers (CEOs) fromthe world’s top insurance and reinsurance companies. It organises international expert networks and managesdiscussion platforms for senior insurance executives and specialists as well as policymakers, regulators and multilateralEstablished in 1973, The Geneva Association, officially the ‘International Association for the Study of InsuranceEconomics’, is based in Zurich, Switzerland and is a non-profit organisation funded by its Members. 2www.genevaassociation.org@TheGenevaAssocuncertainty in the modern economy.organisations. Ten Key Questions on Cyber Riskand Cyber Risk Insuranceby Martin Eling, Werner Schnell, edited by Fabian SommerrockMartin Eling, Werner Schnell—Institute of Insurance Economics, University of St. GallenFabian Sommerrock—Deputy Secretary General and Head of Insight, The Geneva Association Ten Key Questions on Cyber Risk and Cyber Risk Insurance.Published by The Geneva Association—‘International Association for the Study of Insurance Economics’, Zurich.The opinions expressed in The Geneva Association newsletters and publications are the responsibility of the authors. We thereforedisclaim all liability and responsibility arising from such materials by any third parties.Download the electronic versionfromwww.genevaassociation.org.The Geneva AssociationThe Geneva Association—‘International Association for the Study of Insurance Economics’Zurich | Talstrasse 70, CH-8001 ZurichEmail: secretariat@genevaassociation.org | Tel: +41 44 200 49 00 | Fax: +41 44 200 49 99 4www.genevaassociation.org@TheGenevaAssoc© The Geneva AssociationCover page— Garik Barseghyan, Shutterstock. November 2016Photo Credits: ContentsForeword1. Motivation and Aim of the Paper2. Methodology3. Summary of Existing Knowledge on Cyber Risk and Cyber Insurance3.1. What is Cyber Risk? Definition and Categorisation3.2. What are the costs and detrimental effect caused by cyber risk?3.3. Where do we find data on cyber risk?3.4. How can we model cyber risks?3.5. Micro Perspective: How should cyber risk management be organised?3.6. Macro Perspective: Is cyber risk a threat to the global economy and society?3.7. Cyber insurance market: What is the status quo and what are the main insurabilitychallenges?4. Derivation of Potential Future Work (Practical Perspective)4.1. What should the insurance industry do to prevent cyber risks and to support cyberinsurance?4.2. What should the government do to prevent cyber risks and to support cyberinsurance?5. Derivation of Potential Future Research (Academic Perspective)ReferencesAppendices 5Ten Key Questions on Cyber Risk and Cyber Risk Insurance78111212141719232629323335373945 6www.genevaassociation.orgAcknowledgementsThis paper was prepared as part of The Geneva Association research programme ‘Cyber & Innovation’ and greatlyprofited from discussions with numerous academics and practitioners. We are especially grateful to Daljitt Barn(Munich Re), Nick Beecroft, Trevor Maynard (Lloyd's), Maya Bundt, Eric Durand (Swiss Re), José Fidalgo (Allianz), DavidHo, Tracie Grella (AIG), Benno Keller (Zurich), Philipp Lienau, Patrick Smolka (HDI Global), Susan Penwarden, MarkDunham (Aviva UK), Erwin Groeneveld (Aegon), and Jan Wirfs (IVW, University of St. Gallen) for valuable feedback andcomments. @TheGenevaAssoc ForewordAnna Maria D’HulsterSecretary General,The Geneva Association 7Information and communications technology (ICT) has become an essential contributorto our daily lives. Not only is it the engine of trade and of the global financial system,but it is also a vital component of our most critical infrastructure. In simple terms, thenetworks that provide our water, food, electricity, communications and transportation areall dependent on ICT.The advent of user-generated content on the Internet, so-called Web 2.0, is also creatingvast pools of (individual) specific data, some of which are highly sensitive, not least becausethey comprise financial, behavioural, health and other personal information. These data area rich source of insights on individual and collecti