Incentivising Cyber Security Through Cyber Insurance

This project investigates the role of cyber insurance in incentivising cyber security behaviours within organisations.

Main Image Credit Pexels Stock

The Incentivising Cybersecurity through Cyber Insurance (ICCI) project is a collaboration between the University of Kent (UoK) and the Royal United Services Institute (RUSI) which intends to analyse ways in which cyber insurance could provide a significant lever to promote a step change towards better cyber risk management in organisations.

Work on ICCI is supported by the Research Institute in Sociotechnical Cyber Security (RISCS) and the National Cyber Security Centre (NCSC).

Main Image Credit Pexels Stock

Aims and objectives

This project has two key objectives. The first is to develop a clear understanding of the positive outcomes that cyber insurance could have in improving cyber risk management practices, and consequently, to define how these outcomes may be championed to better direct secure behaviours in organisations.

The second objective is to research the extent to which knowledge from the other, more mature insurance portfolios – such as property, natural hazards, maritime, terrorism and health – may be leveraged to advance thinking and practice in cyber insurance.

The project will combine an extensive literature review with stakeholder interviews and focus groups to gain critical insights into the cyber insurance industry. This will involve engagements with a diverse global community, including insurance professionals, policymakers, cyber security experts, and organisations (including SMEs).

ICCI’s research findings will be pivotal in helping decision makers to navigate cyber risk management approaches, understand challenges with incentives in the context of cyber insurance, and provide clear and actionable recommendations that can be adopted by policy makers and practitioners alike.

Project outputs

Access the key outputs of this research project.

Cyber Insurance and the Cyber Security Challenge

Episode 49: Helping Cyber Insurance Help Cyber Security

Cyber insurance is meant to protect businesses from cyber attacks. But does it help or hurt cyber security as it stands now? Cyber Research Analyst Jamie MacColl with the UK’s Royal United Services Institute (RUSI) gives us a primer on cyber insurance.

Cyber Security Incentives and the Role of Cyber Insurance

Explore related projects

Future UK Cyber Security Strategy

Globalisation of Technology

Tackling Cyber Fraud