Topic· 9 essays

Cyber insurance and risk transfer

Underwriters price controls they cannot verify, and sub-limit the losses they cannot underwrite. These essays cover warranties, questionnaires, claims evidence and what a verifiable control would change.

Start here The $20.9 billion re-read is the reference piece behind this topic.

All 9 essays

Definitional

Underwriting on questionnaires when the control is bypassed daily

A cyber questionnaire records stated policy. Claims investigation records what happened. The gap between them is where coverage disputes live.

Vertical

Proving out-of-band verification when the claim is filed

Funds transfer fraud cover requires verification through a second channel. Proving it months later from phone notes is where claims stall.

Vertical

Signing the MFA question is a representation someone will test

Almost everyone answers yes to 'is MFA enforced everywhere?'. After an incident the insurer checks, and 'everywhere' turns out to have edges.

Comparison

What brokers can actually negotiate on impersonation risk

A broker's leverage comes from what they can show an underwriter. On deepfake-enabled fraud there is little to show, which is why sub-limits have not moved.

Vertical

Your cyber limit is not your wire fraud limit

A large cyber tower can carry a small sub-limit for the loss type most likely to occur. Treasury discovers this at claim time rather than at renewal.

Vertical

A 1.2% click rate and a seven-figure wire out the door

Phishing simulation measures whether people click suspicious links. Executive impersonation does not involve a link, and the metric does not extend to it.

Vertical

Financing agent risk through a captive when the market will not write it

Commercial insurers price autonomous-system liability out of reach or decline it, so enterprises retain the risk and own the loss control.

Vertical

Anchoring a fraud investigation to something the attacker could not edit

Forensic reconstruction depends on logs from systems the attacker was inside. Every finding inherits that weakness, and opposing counsel knows it.

Vertical

Software warranties require a defect you can define

Vendors are starting to back security claims with money. A warranty only works if what counts as a failure can be determined without a dispute.

← All topics · All essays