Cyber Insurance and Its Role in Mitigating Cybersecurity Risk

Published: Jan. 8, 2015, 5 p.m.

The goal of any cybersecurity investment is to reduce the potential impact from cyber risk. Initial investments should be in capability development\u2014the implementation of controls to protect and sustain operations that depend on technology. As capability increases, additional capability investments produce diminishing returns\u2014the curve flattens. At that point, investment in cyber insurance becomes an efficient means to further reduce risk.In this podcast, Jim Cebula, the Technical Manager of CERT\u2019s Cybersecurity Risk Management Team, and David White, Chief Knowledge Officer with Axio Global, discuss cyber insurance, its potential role in reducing operational and cybersecurity risk, and how organizations are using it today. We also discuss ongoing CERT research on this topic. Listen on Apple Podcasts.