Pricing Cyber Risk: The Copula-Based Approach

Abstract

Cyber risk refers to risk affecting information and technology assets of a corporation or government institution. As cyber risk management become important, insurance is one possible solution. However, lack of data and severe information asymmetries increase the difficulties in pricing-related insurance products. In this chapter, we discuss first-party insurance that indemnifies the loss when the insured encounters virus attack and provide pricing model for the policy using copula methodology. Simulation results show that model risk may exist in the distribution of server downtime hours and is minor in the distribution of incident frequency and number of personal computers (PCs) infected.