A Fundamental Approach to Cyber Risk Analysis

Böhme R, Laube S, Riek M

Abstract

This article provides a framework for actuaries to think about cyber risk. We propose a differentiated view on cyber versus conventional risk by separating the nature of risk arrival from the target exposed to risk. Our review synthesizes the literature on cyber risk analysis from various disciplines, including computer and network engineering, economics, and actuarial sciences. As a result, we identify possible ways forward to improve rigorous modeling of cyber risk, including its driving factors. This is a prerequisite for establishing a deep and stable market for cyber risk insurance.