Enhancing the Role of Insurance in Cyber Risk Management

The increasing use of digital technologies in economic activities - while creating significant benefits in terms of productivity and efficiency - is also leading to significant risks including the potential for digital security or cyber incidents to compromise the confidentiality, integrity and availability of information and information systems. While not a substitute for investing in cyber security and risk management, insurance coverage for cyber risk can make an important contribution to the management of cyber risk by promoting awareness about exposure to cyber losses, sharing expertise on risk management, encouraging investment in risk reduction and facilitating the response to cyber incidents. This report provides an overview of the financial impact of cyber incidents, the coverage of cyber risk available in the insurance market, the challenges to market development and initiatives aimed at addressing those challenges. It includes a number of policy recommendations aimed at supporting the development of the cyber insurance market and making a contribution to improving the management of cyber risk.