{"id":14133,"date":"2018-10-28T22:39:17","date_gmt":"2018-10-28T22:39:17","guid":{"rendered":"http:\/\/www.lifeandnews.com\/articles\/?p=14133"},"modified":"2018-10-28T22:39:17","modified_gmt":"2018-10-28T22:39:17","slug":"as-digital-threats-grow-will-cyber-insurance-take-off","status":"publish","type":"post","link":"https:\/\/www.lifeandnews.com\/articles\/as-digital-threats-grow-will-cyber-insurance-take-off\/","title":{"rendered":"As digital threats grow, will cyber insurance take off?"},"content":{"rendered":"<p><span><a href=\"https:\/\/theconversation.com\/profiles\/nir-kshetri-227377\">Nir Kshetri<\/a>, <em><a href=\"http:\/\/theconversation.com\/institutions\/university-of-north-carolina-greensboro-2069\">University of North Carolina \u2013 Greensboro<\/a><\/em><\/span><\/p>\n<p>Cyberattacks cost the world <a href=\"https:\/\/www.france24.com\/en\/20180909-cyber-insurance-market-double-2020-says-munich\">more than natural disasters<\/a> \u2013 <a href=\"https:\/\/cybersecurityventures.com\/hackerpocalypse-cybercrime-report-2016\/\">US$3 trillion in 2015<\/a>, a price that may climb to $6 trillion annually by 2021 if present trends continue. But most people \u2013 and even most businesses \u2013 don\u2019t have insurance to protect themselves against this rising threat. <\/p>\n<p>Insurance against all kinds of risks \u2013 disease, disaster, legal liability and more \u2013 is extremely common. In the U.S., companies, families and even government agencies paid a combined <a href=\"https:\/\/data.oecd.org\/insurance\/gross-insurance-premiums.htm\">$2.7 trillion in insurance premiums<\/a> in 2016 \u2013 and received <a href=\"https:\/\/stats.oecd.org\/viewhtml.aspx?datasetcode=PT7&amp;lang=en\">payouts totaling $1.5 trillion<\/a>. But <a href=\"https:\/\/www.jltspecialty.com\/our-insights\/publications\/cyber-decoder\/cyber-insurance-market-grows-as-competition-intensifies\">just $2.5 billion<\/a> \u2013 0.09 percent of the total  spending \u2013 went to buy insurance against cyberattacks and hacking. Elsewhere in the world, there\u2019s even less coverage. For instance, in 2017 the cyber insurance market in India was <a href=\"https:\/\/economictimes.indiatimes.com\/industry\/banking\/finance\/insure\/demand-for-cyber-cover-jumps-50\/articleshow\/62360112.cms\">$27.9 million<\/a>, <a href=\"https:\/\/data.oecd.org\/insurance\/gross-insurance-premiums.htm\">0.04 percent of the total insurance premiums<\/a> paid in the country that year. <\/p>\n<p>From <a href=\"https:\/\/scholar.google.com\/citations?user=Qx3YMi4AAAAJ&amp;hl=en\">my research<\/a> on <a href=\"https:\/\/doi.org\/10.1016\/j.intman.2005.09.009\">cybercrime<\/a> and <a href=\"https:\/\/theconversation.com\/using-blockchain-to-secure-the-internet-of-things-90002\">cybersecurity<\/a> over the past two decades, it is clear to me that cyberattacks have become <a href=\"https:\/\/theconversation.com\/are-cryptocurrencies-a-dream-come-true-for-cyber-extortionists-80115\">increasingly sophisticated<\/a>. The cyber insurance market\u2019s extremely small size suggests that organizations and individuals might have underrated its importance. However, more and more internet users are finding reason to protect themselves. In 10 years\u2019 time, <a href=\"https:\/\/www.ft.com\/content\/72e11ca6-98ad-11e7-8c5c-c8d8fa6961bb\">insurance coverage for cyberattacks could be standard for every homeowner<\/a>. <\/p>\n<h2>Who is buying cyber insurance?<\/h2>\n<p>Certain types of companies tend to have \u2013 or not have \u2013 cyber insurance. The <a href=\"https:\/\/www.oecd-forum.org\/users\/85359-william-below-and-leigh-wolfrom\/posts\/30529-the-cyber-insurance-market-responding-to-a-risk-with-few-boundaries\">larger the firm<\/a> and the more closely it <a href=\"https:\/\/economictimes.indiatimes.com\/industry\/banking\/finance\/insure\/demand-for-cyber-cover-jumps-50\/articleshow\/62360112.cms\">depends on computerized data<\/a>, the more likely it is to have coverage against digital threats.  <\/p>\n<p>For a company, that can make sense, because a digital intrusion can cost <a href=\"https:\/\/www.csoonline.com\/article\/3227065\/security\/cyber-attacks-cost-us-enterprises-13-million-on-average-in-2017.html\">hundreds of thousands<\/a> or even millions of dollars to fix and recover from. For individuals, the costs of a breach are lower, but still significant \u2013 even <a href=\"https:\/\/www.bjs.gov\/content\/pub\/pdf\/vit14.pdf#page=7\">as high as $5,000<\/a>.<\/p>\n<p>Regular people are far less likely to have digital protection than companies are. In India, personal cyber insurance is <a href=\"https:\/\/www.bloombergquint.com\/law-and-policy\/will-personal-cyber-insurance-cover-phishing-hacking-and-stalking\">less than 1 percent<\/a> of the total cyber insurance market. <a href=\"https:\/\/www.insurancejournal.com\/news\/national\/2018\/06\/07\/491496.htm\">In the U.S.<\/a> and elsewhere, most products are <a href=\"https:\/\/www.ft.com\/content\/72e11ca6-98ad-11e7-8c5c-c8d8fa6961bb\">targeted at rich people<\/a>. Insurers such as <a href=\"https:\/\/www.computerworld.com\/article\/3190209\/cybercrime-hacking\/how-one-personal-cyber-insurance-policy-stacks-up.html\">AIG<\/a>, <a href=\"http:\/\/news.chubb.com\/2018-05-30-Chubb-Launches-New-Personal-Cyber-Protection-Coverage\">Chubb<\/a>, <a href=\"https:\/\/www.usatoday.com\/story\/money\/personalfinance\/2017\/10\/08\/personal-cyber-insurance-deploy-case-attack\/720073001\/\">Hartford Steam Boiler and NAS Insurance<\/a> sell personal cyber insurance policies as add-ons to homeowners\u2019 and renters\u2019 insurance.<\/p>\n<p>The insurance industry is doing more, too. A wide range of insurers such as <a href=\"https:\/\/www.munichre.com\/HSB\/personal-cyber-insurance\/index.html\">Munich Re<\/a>, AIG\u2019s CyberEdge, <a href=\"https:\/\/newsroom.saga.co.uk\/news\/saga-is-first-to-launch-personal-cybercrime-insurance-within-their-legal-expenses-cover\">Saga Home Insurance<\/a>, <a href=\"https:\/\/www.burnsandwilcox.com\/getting-personal-cyber-insurance-individuals\/\">Burns &amp; Wilcox<\/a> and Chubb all offer cyber insurance for individuals. These plans <a href=\"https:\/\/www.insurancejournal.com\/news\/national\/2018\/06\/07\/491496.htm\">cover as much as $250,0000<\/a> to repair or replace damaged devices and to pay for expert advice and assistance if a cyberattack affects a policyholder. They may also include data recovery, credit monitoring services and efforts to <a href=\"https:\/\/www.munichre.com\/HSB\/personal-cyber-insurance\/index.html\">undo identity theft<\/a>. <\/p>\n<p>Even health services may be included: AIG\u2019s new product Family CyberEdge policy includes a coverage of one year of <a href=\"https:\/\/www.computerworld.com\/article\/3190209\/cybercrime-hacking\/how-one-personal-cyber-insurance-policy-stacks-up.html\">psychiatric services if a family member is victimized by cyberbullying<\/a>. Also covered is lost salary if the victim loses a job within 60 days of discovering cyberbullying. Some insurers offer policies that provide help to <a href=\"https:\/\/www.americanbar.org\/content\/dam\/aba\/administrative\/litigation\/materials\/2018-insurance\/written-materials\/cyber-policies.authcheckdam.pdf\">assess policyholders\u2019 data security practices and scan for cyberthreats<\/a>. <\/p>\n<h2>Emerging dangers<\/h2>\n<p>Another cybercrime that\u2019s becoming increasingly common is called <a href=\"https:\/\/theconversation.com\/the-petya-ransomware-attack-shows-how-many-people-still-dont-install-software-updates-77667\">ransomware<\/a> \u2013 in which <a href=\"https:\/\/theconversation.com\/its-easier-to-defend-against-ransomware-than-you-might-think-57258\">malicious software takes over a person\u2019s computer<\/a> and encrypts his or her data. Then the program <a href=\"https:\/\/theconversation.com\/are-cryptocurrencies-a-dream-come-true-for-cyber-extortionists-80115\">demands the victim pay a ransom<\/a> \u2013 often in bitcoin or other cryptocurrencies \u2013 to get the data decrypted. <\/p>\n<p>Some ransomware attackers <a href=\"https:\/\/krebsonsecurity.com\/2016\/12\/before-you-pay-that-ransomware-demand\/\">don\u2019t actually decrypt the data<\/a>, even if they get paid \u2013 but that hasn\u2019t stopped victims from paying big bucks \u2013 at least <a href=\"https:\/\/news.vice.com\/en_us\/article\/4345ep\/ransomware-how-hackers-make-you-pay\">$1 billion in 2016 alone<\/a>. Even so, there are insurers who sell coverage against ransomware, providing backup and decryption services \u2013 or even <a href=\"https:\/\/www.munichre.com\/HSB\/personal-cyber-insurance\/index.html\">paying the ransom<\/a>.  <\/p>\n<figure class=\"align-center zoomable\">\n            <a href=\"https:\/\/images.theconversation.com\/files\/241741\/original\/file-20181022-105773-1jt0bde.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=1000&amp;fit=clip\"><img alt=\"\" src=\"https:\/\/images.theconversation.com\/files\/241741\/original\/file-20181022-105773-1jt0bde.jpg?ixlib=rb-1.1.0&amp;q=45&amp;auto=format&amp;w=754&amp;fit=clip\"><\/a><figcaption>\n              <span class=\"caption\">Smart home technologies may be vulnerable to hackers.<\/span><br \/>\n              <span class=\"attribution\"><a class=\"source\" href=\"https:\/\/www.shutterstock.com\/image-photo\/hand-using-smart-phone-home-control-593310101\">mangpor2004\/Shutterstock.com<\/a><\/span><br \/>\n            <\/figcaption><\/figure>\n<p>As <a href=\"https:\/\/www.smartcitiesworld.net\/special-reports\/special-reports\/why-the-smart-city-could-increasingly-start-at-home\">smart home systems<\/a> become more popular \u2013 as well as various <a href=\"https:\/\/ssrn.com\/abstract=2636412\">technologies to monitor and help coordinate<\/a> local government services \u2013 they\u2019ll provide <a href=\"http:\/\/www.zdnet.com\/article\/internet-of-things-a-security-threat-to-business-by-the-backdoor\/\">more potential entry points for hackers<\/a>. An average home insured by AIG <a href=\"https:\/\/www.ft.com\/content\/72e11ca6-98ad-11e7-8c5c-c8d8fa6961bb\">has 20 Wi-Fi-enabled devices<\/a>. Replacing a hijacked home\u2019s entire smart lighting system, smart entertainment center, thermostat and digital security devices will be expensive \u2013 and the bill will only be higher for communities using <a href=\"https:\/\/www.richardvanhooijdonk.com\/en\/blog\/6-smartest-smart-cities-world\/\">internet-connected streetlights, water meters, electric cars and traffic controls<\/a>. Those are opportunities for insurance companies to step in.<\/p>\n<h2>Some current challenges<\/h2>\n<p>Before cyber insurance becomes more common, however, the insurance industry will likely have to come to some consensus about <a href=\"https:\/\/www.marsh.com\/my\/insights\/research\/cyber-risk-in-asia-pacific-the-case-for-greater-transparency.html\">what will and won\u2019t be covered<\/a>. At the moment <a href=\"http:\/\/www.theactuary.com\/news\/2018\/08\/uk-firms-ahead-of-the-curve-for-cyber-insurance-uptake\/\">each plan differs substantially<\/a> \u2013 so customers must conduct a detailed assessment of their own risks to figure out what to buy. Few people <a href=\"https:\/\/www.marsh.com\/my\/insights\/research\/cyber-risk-in-asia-pacific-the-case-for-greater-transparency.html\">know enough<\/a> to be truly informed customers. Even <a href=\"https:\/\/www.insurancejournal.com\/news\/international\/2018\/05\/15\/489196.htm\">insurance brokers don\u2019t know enough<\/a> about cyber risks to usefully help their clients.<\/p>\n<p>In addition, because cybercrime is relatively new, insurers do not have much data on how much various types of cybersecurity problems can cost to fix or recover from. They therefore tend to be <a href=\"https:\/\/blog.abacus.com\/basics-of-cybersecurity-insurance\/\">conservative and overcharge<\/a>.<\/p>\n<p>As people become better-informed about the digital dangers in their lives, and as insurance companies are able to more clearly explain \u2013 and more accurately price \u2013 their coverage options, the cyber insurance market will grow and may expand rapidly. In the meantime, most policies have some degree of custom design, so consumers should be careful to look for policies that actually cover their needs, and not just evaluate plans based on cost.<!-- Below is The Conversation's page counter tag. Please DO NOT REMOVE. --><img loading=\"lazy\" src=\"https:\/\/counter.theconversation.com\/content\/104371\/count.gif?distributor=republish-lightbox-basic\" alt=\"The Conversation\" width=\"1\" height=\"1\" style=\"border: none !important; box-shadow: none !important; margin: 0 !important; max-height: 1px !important; max-width: 1px !important; min-height: 1px !important; min-width: 1px !important; opacity: 0 !important; outline: none !important; padding: 0 !important; text-shadow: none !important\" \/><!-- End of code. If you don't see any code above, please get new code from the Advanced tab after you click the republish button. The page counter does not collect any personal data. More info: http:\/\/theconversation.com\/republishing-guidelines --><\/p>\n<p><span><a href=\"https:\/\/theconversation.com\/profiles\/nir-kshetri-227377\">Nir Kshetri<\/a>, Professor of Management, <em><a href=\"http:\/\/theconversation.com\/institutions\/university-of-north-carolina-greensboro-2069\">University of North Carolina \u2013 Greensboro<\/a><\/em><\/span><\/p>\n<p>This article is republished from <a href=\"http:\/\/theconversation.com\">The Conversation<\/a> under a Creative Commons license. Read the <a href=\"https:\/\/theconversation.com\/as-digital-threats-grow-will-cyber-insurance-take-off-104371\">original article<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Nir Kshetri, University of North Carolina \u2013 Greensboro Cyberattacks cost the world more than natural disasters \u2013 US$3 trillion in 2015, a price that may climb to $6 trillion annually by 2021 if present trends continue. But most people \u2013 and even most businesses \u2013 don\u2019t have insurance to protect themselves against this rising threat. [&hellip;]<\/p>\n","protected":false},"author":44,"featured_media":14128,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3410],"tags":[5361,4327,793,5360,3082],"_links":{"self":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/14133"}],"collection":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/comments?post=14133"}],"version-history":[{"count":1,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/14133\/revisions"}],"predecessor-version":[{"id":14134,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/14133\/revisions\/14134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media\/14128"}],"wp:attachment":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media?parent=14133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/categories?post=14133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/tags?post=14133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}