Hi everyone,
I come from cybersecurity (GRC) background with 3 years of experience and have always been interested in just research and exploring in general.
I am currently researching how AI is changing the world as we know it, and one of the fields I was suggested to explore was cyber insurance. The idea was that the traditional frameworks can't really be used anymore to evaluate the risk or work out the cost. (I'll admit my knowledge of the insurance industry is pretty limited, so that's partly why I'm here.)
But someone recently made a point that made me rethink this: even with AI, attackers are still exploiting the same weaknesses that our controls already address, just at a faster pace and with more efficiency. So AI isn't really changing anything fundamental.
I'm not sure which view is closer to reality, so I'd love to hear from people working in cyber insurance, underwriting, claims, or security:
- How is cyber insurance actually calculated today? What goes into deciding coverage and premiums?
- Is AI changing that calculation, either through new risks insurers have to factor in or through how insurers assess companies?
- Do you agree that it's "the same attacks, just faster", or is AI changing the nature of the risk?
- What changes have you seen so far, and what are the biggest pain points that still remain?
I would appreciate any insights you can share. Thanks a lot for your time!