Policy measures and cyber insurance: a framework

Improvements in cyber security are being driven in part as a result of the insurance industry's efforts, proving mutually beneficial to both the insurers and policy-makers. In cyberspace, there has not yet been any consideration of a public-private partnership to facilitate the roles of policy and insurance against malicious cyber events. This paper defines what such a partnership between a government and private insurers might look like to develop the cyber security. The paper qualitatively analyzes current policies set forth by governing bodies and organizations in cyberspace while also performing primary data collection through interviews with cyber insurance professionals. Through this analysis, the paper presents a framework for public-private partnerships in cyber insurance and future steps to implement the presented ideas.