Dr Jason Nurse from the School of Computing has partnered on a new project with The Royal United Services Institute (RUSI) to investigate the role of cyber insurance in incentivising cyber security behaviours within organisations.
The project, titled ‘Incentivising Cybersecurity through Cyber Insurance’ (ICCI), will analyse ways in which cyber insurance could provide a significant lever to promote a step change towards better cyber risk management in organisations.
It aims to to develop a clear understanding of the positive outcomes that cyber insurance could have in improving cyber risk management practices, and consequently, to define how these outcomes may be championed to better direct secure behaviours in organisations. The project will also research the extent to which knowledge from other, more mature insurance portfolios – such as property, natural hazards, maritime, terrorism and health – may be leveraged to advance thinking and practice in cyber insurance.
ICCI’s research findings will be pivotal in helping decision makers to navigate cyber risk management approaches, understand challenges with incentives in the context of cyber insurance, and provide clear and actionable recommendations that can be adopted by policy makers and practitioners alike.
The research is funded by the National Cyber Security Centre (NCSC), in collaboration with the Research Institute in Sociotechnical Cyber Security (RISCS).