Cyberinsurance adoption strategies and security of online behaviour: an experimental study

Yolanda Gómez, Dawn Branley-Bell, Pam Briggs and José Vila

Behaviour and Information Technology, 2025, vol. 44, issue 6, 1169-1182

Abstract: Cybersecurity is a critical global challenge as organisations face increasingly sophisticated threats. While technical solutions remain essential, human decision-making plays a central role in determining cybersecurity outcomes. This study examines how individuals adopt cyberinsurance and protection measures, focusing on whether their decisions align with rational choice models. Using an online economic experiment with 4800 participants across four countries, we analyse purchasing behaviours and subsequent online security practices under varying scenarios of attack intentionality and pricing strategies. Our findings reveal that individuals deviate from expected utility maximisation, often choosing overprotective strategies with higher levels of insurance and security than economically optimal. We also find that contrary to concerns about moral hazard, insured individuals do not exhibit riskier behaviour post-adoption; instead, they maintain or enhance their security practices. Additionally, pricing mechanisms that link insurance premiums to protection levels promote more rational decision-making. These results highlight the interplay between human heuristics and cybersecurity strategies, suggesting that interventions must account for cognitive biases while designing effective cyberinsurance products and policies. This research contributes to the literature on behavioural economics in cybersecurity, offering insights into how decision-making frameworks can support more secure online environments.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/0144929X.2025.2467891 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:tbitxx:v:44:y:2025:i:6:p:1169-1182

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/tbit20

DOI: 10.1080/0144929X.2025.2467891

Access Statistics for this article

Behaviour and Information Technology is currently edited by Dr Panos P Markopoulos

More articles in Behaviour and Information Technology from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().