Bitte verwenden Sie diesen Link, um diese Publikation zu zitieren, oder auf sie als Internetquelle zu verweisen: https://hdl.handle.net/10419/307088 
Erscheinungsjahr: 
2023
Quellenangabe: 
[Journal:] The Geneva Papers on Risk and Insurance - Issues and Practice [ISSN:] 1468-0440 [Volume:] 48 [Issue:] 2 [Publisher:] Springer Nature [Place:] Berlin [Year:] 2023 [Pages:] 463-501
Verlag: 
Springer Nature, Berlin
Zusammenfassung: 
Cyber incidents are among the most critical business risks for organisations and can lead to large financial losses. However, previous research on loss modelling is based on unassured data sources because the representativeness and completeness of op-risk databases cannot be assured. Moreover, there is a lack of modelling approaches that focus on the tail behaviour and adequately account for extreme losses. In this paper, we introduce a novel 'tempered' generalised extreme value (GEV) approach. Based on a stratified random sample of 5000 interviewed German organisations, we model different loss distributions and compare them to our empirical data using graphical analysis and goodness-of-fit tests. We differentiate various subsamples (industry, size, attack type, loss type) and find our modified GEV outperforms other distributions, such as the lognormal and Weibull distributions. Finally, we calculate losses for the German economy, present application examples, derive implications as well as discuss the comparison of loss estimates in the literature.
Schlagwörter: 
Cyber incident losses
Loss size distribution
Extreme value distribution
Tapered distribution
Information security management
Data breach
Persistent Identifier der Erstveröffentlichung: 
Creative-Commons-Lizenz: 
cc-by Logo
Dokumentart: 
Article
Dokumentversion: 
Published Version

Datei(en):
Datei
Größe





Publikationen in EconStor sind urheberrechtlich geschützt.