A New Approach to Quantifying, Reducing and Insuring Cyber Risk: Preliminary Analysis and Proposal for Further Research

Neil Gandal, Michael Riordan and Shalom Bublil

No 14461, CEPR Discussion Papers from C.E.P.R. Discussion Papers

Abstract: Few would dispute that cyber risk is a very serious problem for the global economy and for society. But there is a “disconnect†between acknowledgement of the problem and action to address the problem. What is the relationship between vulnerabilities, preventive measures, and security incidents, like the leaking of sensitive data (say credit card information) to the web? To the best of our knowledge, little if anything is known about the relationship among these variables and no one has examined this issue empirically at the micro level, that is, at the level of the firm. In this paper, we put together a remarkable and unique cross-sectional data set at the firm level that includes information on vulnerabilities, attempted email attacks, incidents (breaches), precautions (security measures.) and firm characteristics. The data set contains slightly under 1000 small and medium firms in the U.K. We empirically examine the data and show that there are meaningful correlations among incidents and the other variables. Finally, we estimate a reduced form model with incidents as the dependent variable to illustrate the potential from employing such data.

Keywords: Cyber risk; Cyber security; Cyber insurance; Empirical (search for similar items in EconPapers)
Date: 2020-03
New Economics Papers: this item is included in nep-ias and nep-rmg
References: View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
https://cepr.org/publications/DP14461 (application/pdf)
CEPR Discussion Papers are free to download for our researchers, subscribers and members. If you fall into one of these categories but have trouble downloading our papers, please contact us at subscribers@cepr.org

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:cpr:ceprdp:14461

Ordering information: This working paper can be ordered from
https://cepr.org/publications/DP14461

Access Statistics for this paper

More papers in CEPR Discussion Papers from C.E.P.R. Discussion Papers Centre for Economic Policy Research, 33 Great Sutton Street, London EC1V 0DX.
Bibliographic data for series maintained by ().