dc.contributor.author | Meland, Per Håkon | |
dc.contributor.author | Seehusen, Fredrik | |
dc.date.accessioned | 2019-04-25T10:35:41Z | |
dc.date.available | 2019-04-25T10:35:41Z | |
dc.date.created | 2018-12-13T13:50:19Z | |
dc.date.issued | 2018 | |
dc.identifier.isbn | 978-1-5386-4565-9 | |
dc.identifier.uri | http://hdl.handle.net/11250/2595461 | |
dc.description.abstract | Transferring security risk to a third party through cyber insurance is an unfamiliar playing field for a lot of organisations, and therefore many hesitate to make such investments. Indeed, there is a general need for affordable and practical ways of performing risk quantification when determining risk treatment options. To address this concern, we propose a lightweight, data-driven approach for organisations to evaluate their own need for cyber insurance. A generic risk model, populated with available industry averages, is used as a starting point. Individual organisations can instantiate this model to obtain a risk profile for themselves related to relevant cyber threats. The risk profile is then used together with a cyber insurance profile to estimate the benefit and as a basis for comparing offers from different insurance providers. | nb_NO |
dc.language.iso | eng | nb_NO |
dc.publisher | Institute of Electrical and Electronics Engineers (IEEE) | nb_NO |
dc.relation.ispartof | 2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) | |
dc.title | When to Treat Security Risks with Cyber Insurance | nb_NO |
dc.type | Chapter | nb_NO |
dc.description.version | acceptedVersion | nb_NO |
dc.identifier.doi | 10.1109/CyberSA.2018.8551456 | |
dc.identifier.cristin | 1642713 | |
dc.relation.project | Norges forskningsråd: 259869 | nb_NO |
dc.description.localcode | © 2018 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. | nb_NO |
cristin.unitcode | 194,0,0,0 | |
cristin.unitname | Norges teknisk-naturvitenskapelige universitet | |
cristin.ispublished | true | |
cristin.fulltext | postprint | |
cristin.qualitycode | 1 | |