Cyberinsurance awareness SecAware

Aside from the direct, immediate impacts (losses and costs) and effects on business systems, networks and data, cyber incidents may have devastating business consequences if supply chains, perhaps even whole industries and nations are affected. Cyber risk is an increasingly significant concern to virtually all organizations, especially those that are critically reliant on IT systems, networks and data. Arguably the most effective way to reduce cyber risk is to avoid risky business activities altogether … but naturally that means forgoing the business benefits of those activities. The next best option is to mitigate or reduce the risks using cybersecurity controls. These can be costly and imperfect, but at least the activities can take place. Sharing or transferring risk to third parties is the subject of this module. Cyberinsurance is novel, an emerging good practice in information and cyber security. This awareness module helps people acquire knowledge and capabilities, and (for man...