Impact of the evergrowing cyber attacks on cyber insurance industry and policies
For a typical business or government entity, it is harder than ever to get or keep a cyber policy. Insurance companies are refusing to renew 55% of policies, rejecting 30% of new policy requests, raising premiums an average of 85%. The main reason is the Doxware/Ransomware payouts. The main source for the attacks are nation state players, who are targeting, cities, municipalities, and other strategic businesses in Defense Industrial Base, for example. The questions to be answered as a part of this project include (but not limited to): What are the trends for the the targeted data? For example, the typical organization size, industry, goverment/private entity, etc. What is the attack goal? What percentage of the victim organization data is published? What is the type of the data? Are there any common themes that the insurance underwriters are seeking in this environment? Is it technology oriented or policy oriented? For tech oriented goals, what is the prerequisite for a business to even get considered for a cyber insurance policy? How does the government support these efforts?