General Insurance Article - Nat cat models are just a base for cyber modelling


A lack of historical data and the rapidly evolving nature of cyber threats means that cyber risk modellers need to be selective in the lessons they learn from natural catastrophe models.

 According to a new report from market-leading cyber analytics provider CyberCube, the evolution of natural catastrophe modelling since Hurricane Andrew in 1992 can act as a template for cyber modellers, but only up to a point. Beyond that, cyber modellers need to develop their own solutions.

 While there are similarities between the two types of models, the report, Drawing from the Experience of Nat Cat Modeling, highlights three key differences. In addition to a lack of historical data and the rapid frequency with which cyber events are changing, cyber-attacks involve ‘active adversaries’ in the form of criminals or terrorists. These important differences mean that cyber modelers do not have the time or ability to ‘observe, learn and adapt from past data and models’.

 One key challenge for cyber modelers identified in the report is the need to improve accuracy in this sector in which the past provides limited guidance as to future activity.

 Oliver Brew, CyberCube’s Head of Client Services and one of the report’s authors, said: “There’s a well-known phrase in statistical circles that while all models are wrong, some are useful. Models like CyberCube’s do not have a predictive line of sight to outcomes but they do aid decision-making, capital planning and a wide range of other factors.

 “For a long time, our sector thought that by studying the way in which nat cat models developed, we could find answers to build better cyber models. What this report shows is that those parallels will only take us so far.

 “The challenge for businesses like CyberCube is to use the tools at our disposal to learn from the past and make informed decisions about the future. The good news is that cyber models are improving rapidly with more useful data sources and faster cloud-hosted processing power.”

 The report studied how Hurricane Andrew in 1992 highlighted significant weaknesses in what were then current modelling practices.

 Yvette Essen, Head of Content at CyberCube, said: “Back then, insurers estimated the size of future losses using ‘experience’ data based only on what happened in the past. Actuaries simply adjusted recent history to reflect current trends. Hurricane Andrew helped to prove that past data is a poor gauge for future catastrophe exposure. Previous projections failed to recognise that science indicated unprecedented events were within the realm of reasonable possibility.”

 The limited volume of ‘categorised and structured’ data relating to insured cyber losses may also hamper the development of cyber models. While there are many sources for information on well-documented cyber incidents, the report notes, these have not translated into a similar volume of useful data that insurers and modelers can utiltise.
  

Back to Index


Similar News to this Story

IFoA urges Chancellor to prioritise fairness in UK Budget
Ahead of the Autumn Budget and Spending Review, due to be delivered on Wednesday 27 October, the Institute and Faculty of Actuaries (IFoA) is urging t
Vanguard joins Origo Transfer Index
Vanguard is the latest company to join the Origo Transfer Index (OTI), the voluntary index set up by Origo to increase transparency in the transfer ma
Insurers ratify G20 priorities on sustainability and climate
The Italian Insurance Association (ANIA) — in partnership with the Italian G20 Presidency and in collaboration with the Global Federation of Insurance

Site Search

Exact   Any  

Latest Actuarial Jobs

Actuarial Login

Email
Password
 Jobseeker    Client
Reminder Logon

APA Sponsors

Actuarial Jobs & News Feeds

Jobs RSS News RSS

WikiActuary

Be the first to contribute to our definitive actuarial reference forum. Built by actuaries for actuaries.