This book helps professionals understand one of the leading corporate and societal threats: cyber risk. It explains who is carrying out cyber attacks, why they are doing it, which types of companies are being attacked and why. It will help business executives determine whether their organization is susceptible, what types of attacks are most likely, and the most cost-effective methods of reducing risk. This book is a complete framework for assessing and quantifying cyber risk, using new techniques developed for the insurance industry. It uses statistical data and cost information blended with research regarding the culture, psychology and business models of the hacker community, and technical assessments of potential attack paths, technologies, and security techniques for protection. This provides an understanding of the cyber threat landscape, enables corporate assessment of Key Risk Indicators, and provides approaches to tracking future trends in cyber risk, all in a manner accessible to non-specialists. The authors distill a decade of research, applying risk management approaches to cyber security to safeguard organizations.
