“Many insurers are challenged to understand how often various types of cyber incidents can occur and how they can affect the performance of their book,” said Prashant Pai, vice president of cyber offerings at Verisk. “As a result, decisions on product development, underwriting, portfolio optimization, and capital allocation tend to be made with limited data; and too much weight is often put on intuition or broad assumptions. This is where probabilistic modeling can help the industry better manage cyber risk globally.”
AIR’s probabilistic cyber model estimates the likelihood, severity, and economic and insurance impact of security breach and cloud service provider downtime incidents; cloud service provider downtime incidents are one of the most likely forms of aggregation risk for cyber. The new AIR cyber model has been calibrated with public, commercial, and insurance claims data that includes information on more than 60,000 worldwide incidents and the cybersecurity profile of over 100,000 organizations globally.
“The detail and quality of the data we have has allowed us to apply innovative stochastic and machine learning techniques to create a model that provides granular output,” said Scott Stransky, assistant vice president and director of emerging risk modeling at AIR. “By training our machine learning model on real claims data, the model can differentiate the risk by technographic parameters such as cybersecurity practices, cloud service provider, and the cause of cloud downtime incidents, in addition to firmographic characteristics such as company size and sector. AIR’s philosophy is to be transparent and flexible about the various modeling assumptions we’ve made, and model users can dig into them and truly own the risk. Additionally, we’ve collaborated with development partners to allow outputs to be displayed to our users at the organization level.”
Ian Newman, partner and global head of cyber at Capsicum Re, said, “We’re excited to be both one of the first users of AIR’s new probabilistic cyber model and a part of the model’s development. Making use of AIR’s cutting-edge model will help our current and prospective clients better understand their cyber exposures. It will reinforce our ability to develop and deliver innovative cyber insurance solutions, such as cyber industry loss warranties (ILWs), and work with insurance-linked securities (ILS). We also believe analytics are key to the market of the future, which will consist of three core classes: property, casualty, and cyber (PC&C).”
Pai concluded, “The AIR cyber model is the output of several years of work by experts across all of Verisk in the fields of cybersecurity, data science, underwriting, and catastrophe modeling. Our mission is to help the cyber insurance industry grow profitably, and this model will help us take a big leap forward.”
In addition to the probabilistic model, the latest version of ARC features functionality to help insurers understand their additional risk due to GDPR, the expansion of AIR’s cyber industry exposure database to regions globally, and many other enhancements.
About AIR Worldwide
AIR Worldwide (AIR) provides risk modeling solutions that make individuals, businesses, and society more resilient to extreme events. In 1987, AIR Worldwide founded the catastrophe modeling industry and today models the risk from natural catastrophes, terrorism, pandemics, casualty catastrophes, and cyber incidents. Insurance, reinsurance, financial, corporate, and government clients rely on AIR’s advanced science, software, and consulting services for catastrophe risk management, insurance-linked securities, longevity modeling, site-specific engineering analyses, and agricultural risk management. AIR Worldwide, a Verisk (Nasdaq:VRSK) business, is headquartered in Boston, with additional offices in North America, Europe, and Asia. For more information, please visit www.air-worldwide.com.