Киберстрахование как способ управления киберрисками

Безопасность в техносфере. 2018. Т. 7. № 5. С. 35–42.

Suvorov A., Матанцева М. О., Plotnikova E. G.

A review of the cyber insurance domain has been carried out with a description of classical terms from the insurance industry. Have been considered two the most comprehensive today definitions of cyber risk in authors’ opinion. A diagram of processes for cyber risk management using insurance has been presented, and the place of cyber-risk among other company’s risks has been demonstrated, i. e. the context of cyber risk among the risks of any commercial organization has been shown. A typical cyber insurance process has been described, and a scheme of cyber insurance processes has been developed. A brief description of problem areas and controversial issues in cyber insurance, with which cyber-risk insurance practices may face, has been presented, as well as a table showing at which stage of cyber-insurance the specific problems may arise. Has been provided the basic economic utility function, which formalizes decision making for agents with a different attitude to risk. Standards in cyber security, and various software products that can be used as a tool for assessing the security level of an enterprise’s IT infrastructure have been presented, and it has been demonstrated how these products can help in cyber risk ssessment. Different methods used at each stage of cyber insurance have been shown.

Keywords: информационная безопасность, функция полезности, utility function, information security, cyber-risk, cyber insurance, security standards, киберриск, киберстрахование, стандарты безопасности