Please use this identifier to cite or link to this item: https://hdl.handle.net/10419/313391 
Year of Publication: 
2023
Citation: 
[Journal:] The Geneva Papers on Risk and Insurance - Issues and Practice [ISSN:] 1468-0440 [Volume:] 48 [Issue:] 2 [Publisher:] Palgrave Macmillan UK [Year:] 2023 [Pages:] 502-547
Publisher: 
Palgrave Macmillan UK
Abstract: 
Abstract As the cyber insurance market is expanding and cyber insurance policies continue to mature, the potential of including pre-incident and post-incident services into cyber policies is being recognised by insurers and insurance buyers. This work addresses the question of how such services should be priced from the insurer’s viewpoint, i.e. under which conditions it is rational for a profit-maximising, risk-neutral or risk-averse insurer to share the costs of providing risk mitigation services. The interaction between insurance buyer and seller is modelled as a Stackelberg game, where both parties use distortion risk measures to model their individual risk aversion. After linking the notions of pre-incident and post-incident services to the concepts of self-protection and self-insurance, we show that when pricing a single contract, the insurer would always shift the full cost of self-protection services to the insured; however, this does not generally hold for the pricing of self-insurance services or when taking a portfolio viewpoint. We illustrate the latter statement using toy examples of risks with dependence mechanisms representative in the cyber context.
Subjects: 
Cyber risk
Cyber insurance
Cyber assistance
Prevention
Self-protection
Self-insurance
Coherent risk measures
Stackelberg game
Persistent Identifier of the first edition: 
Creative Commons License: 
cc-by Logo
Document Type: 
Article
Document Version: 
Published Version
Appears in Collections:

Files in This Item:
File
Size





Items in EconStor are protected by copyright, with all rights reserved, unless otherwise indicated.