Does Insurance Have a Future in Governing Cybersecurity?
Daniel Woods, Tyler Moore · IEEE Security & Privacy · 2019
Cyber insurance could achieve public policy goals for cybersecurity using private-sector means. Insurers assess organizational security postures, prescribe security procedures and controls, and provide postincident services. We evaluate how such mechanisms impact security, identify market dynamics restricting their effectiveness, and sketch out possible futures for cyber insurance as governance.