dc.contributor.author | Meland, Per Håkon | |
dc.contributor.author | Seehusen, Fredrik | |
dc.date.accessioned | 2022-03-23T14:03:19Z | |
dc.date.available | 2022-03-23T14:03:19Z | |
dc.date.created | 2019-01-21T10:34:38Z | |
dc.date.issued | 2018 | |
dc.identifier.citation | International Journal On Cyber Situational Awareness (IJCSA). 2018, 3 (1), 39-60. | en_US |
dc.identifier.issn | 2057-2182 | |
dc.identifier.uri | https://hdl.handle.net/11250/2987133 | |
dc.description.abstract | Transferring security risk to a third party through cyber insurance is an unfamiliar playing field for a lot of organisations, and therefore many hesitate to make such investments. Indeed, there is a general need for affordable and practical ways of performing risk quantification when determining risk treatment options. To address this concern, we propose a lightweight, data-driven approach for organisations to evaluate their own need for cyber insurance. A generic risk model, populated with available industry averages, is used as a starting point. Individual organisations can instantiate this model to obtain a risk profile for themselves related to relevant cyber threats. The risk profile is then used together with a cyber insurance profile to estimate the benefit and as a basis for comparing offers from different insurance providers. | en_US |
dc.language.iso | eng | en_US |
dc.rights | Navngivelse 4.0 Internasjonal | * |
dc.rights.uri | http://creativecommons.org/licenses/by/4.0/deed.no | * |
dc.title | When to Treat Security Risks with Cyber Insurance | en_US |
dc.type | Journal article | en_US |
dc.type | Peer reviewed | en_US |
dc.description.version | publishedVersion | en_US |
dc.source.pagenumber | 39-60 | en_US |
dc.source.volume | 3 | en_US |
dc.source.journal | International Journal On Cyber Situational Awareness (IJCSA) | en_US |
dc.source.issue | 1 | en_US |
dc.identifier.doi | 10.22619/IJCSA.2018.100119 | |
dc.identifier.cristin | 1661981 | |
dc.relation.project | EC/H2020/653321 | en_US |
cristin.unitcode | 194,63,10,0 | |
cristin.unitname | Institutt for datateknologi og informatikk | |
cristin.ispublished | true | |
cristin.fulltext | original | |
cristin.qualitycode | 1 | |