Heterogeneity in cyber loss severity and its impact on cyber risk measurement

Martin Eling and Kwangmin Jung

Risk Management, 2022, vol. 24, issue 4, No 1, 273-297

Abstract: Abstract We use the world’s largest publicly available dataset of operational risk to model cyber losses and show that the Tweedie model best fits the cyber loss severity in the financial industry. Three key determinants of loss severity are firm size, contagion risk and legal liability. We also measure the size of risk based on the estimation results and show a large degree of heterogeneity across financial firms. The results are particularly relevant with respect to the recent discussion on simplifying operational risk capital requirements and reiterate the importance of considering individual firm characteristics when modelling operational losses.

Keywords: Operational risk; Cyber risk; Financial services industry; Tweedie model (search for similar items in EconPapers)
JEL-codes: C13 G32 (search for similar items in EconPapers)
Date: 2022
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
http://link.springer.com/10.1057/s41283-022-00095-w Abstract (text/html)
Access to the full text of the articles in this series is restricted.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:pal:risman:v:24:y:2022:i:4:d:10.1057_s41283-022-00095-w

Ordering information: This journal article can be ordered from
https://www.palgrave.com/gp/journal/41283

DOI: 10.1057/s41283-022-00095-w

Access Statistics for this article

Risk Management is currently edited by Igor Loncarski

More articles in Risk Management from Palgrave Macmillan
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().