A paper from RUSI on 7 December outlines the opportunities of and challenges in using cyber insurance to incentivise cyber security practices. Its findings are based on a review of existing industry reports and academic research. It says that The uptake of cyber insurance, particularly by SME, remains low. It identifies several policy questions raised by the existing literature. These questions serve to guide the next stage of the project and to prompt new conversations about how cyber insurance might better incentivise cyber security practices.
https://rusi.org/sites/default/files/246_ei_cyber_insurance_final_web_version.pdf
I had omitted the following link (as it did not seem to generate much interest!), but it seemed time to add it again and say that, if you would like to make a (polite) gesture and help me with my removal and computer costs, I have a page at https://www.buymeacoffee.com/KoIvM842y
