Software Engineering Institute

In this interview, Summer Fowler and Jim Cebula provide an overview of the 2015 CERT Cyber Risk Insurance Symposium, which takes place in Arlington, Va., on May 19, 2015.

Recent high profile data breaches and cyber security incidents highlight the potentially large monetary consequences to organizations due to cyber security events. The growing market for cyber risk insurance offers one possible avenue for organizations to manage this risk.

However, a lack of traditional actuarial data makes it difficult to determine if a particular set of security practices are measurably effective predictors of future losses due to cyber events.

The symposium, through a series of presentations, panels, and an interactive exercise, will explore some of these challenges and offer some ideas for a way forward.