Pub Date : 2023-01-01Epub Date: 2023-05-08DOI: 10.1057/s41288-023-00289-7
Gabriela Zeller, Matthias Scherer
As the cyber insurance market is expanding and cyber insurance policies continue to mature, the potential of including pre-incident and post-incident services into cyber policies is being recognised by insurers and insurance buyers. This work addresses the question of how such services should be priced from the insurer's viewpoint, i.e. under which conditions it is rational for a profit-maximising, risk-neutral or risk-averse insurer to share the costs of providing risk mitigation services. The interaction between insurance buyer and seller is modelled as a Stackelberg game, where both parties use distortion risk measures to model their individual risk aversion. After linking the notions of pre-incident and post-incident services to the concepts of self-protection and self-insurance, we show that when pricing a single contract, the insurer would always shift the full cost of self-protection services to the insured; however, this does not generally hold for the pricing of self-insurance services or when taking a portfolio viewpoint. We illustrate the latter statement using toy examples of risks with dependence mechanisms representative in the cyber context.
Supplementary information: The online version contains supplementary material available at 10.1057/s41288-023-00289-7.
{"title":"Risk mitigation services in cyber insurance: optimal contract design and price structure.","authors":"Gabriela Zeller, Matthias Scherer","doi":"10.1057/s41288-023-00289-7","DOIUrl":"10.1057/s41288-023-00289-7","url":null,"abstract":"<p><p>As the cyber insurance market is expanding and cyber insurance policies continue to mature, the potential of including pre-incident and post-incident services into cyber policies is being recognised by insurers and insurance buyers. This work addresses the question of how such services should be priced from the insurer's viewpoint, i.e. under which conditions it is rational for a profit-maximising, risk-neutral or risk-averse insurer to share the costs of providing risk mitigation services. The interaction between insurance buyer and seller is modelled as a Stackelberg game, where both parties use distortion risk measures to model their individual risk aversion. After linking the notions of pre-incident and post-incident services to the concepts of self-protection and self-insurance, we show that when pricing a single contract, the insurer would always shift the full cost of self-protection services to the insured; however, this does not generally hold for the pricing of self-insurance services or when taking a portfolio viewpoint. We illustrate the latter statement using toy examples of risks with dependence mechanisms representative in the cyber context.</p><p><strong>Supplementary information: </strong>The online version contains supplementary material available at 10.1057/s41288-023-00289-7.</p>","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"48 2","pages":"502-547"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10165595/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9502842","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01DOI: 10.1057/s41288-021-00253-3
M Antonini, R C van Kleef, J Henriquez, F Paolucci
Several regulated health insurance markets include the option for consumers to choose a voluntary deductible. An important motive for this option is to reduce moral hazard. In return for a voluntary deductible, consumers receive a premium rebate, which is typically community rated. Under community rating, voluntary deductibles are particularly attractive for low-risk consumers. Since these people use relatively little medical care, the total moral hazard reduction might be relatively small compared to the total healthcare spending. This paper examines the potential moral hazard reduction under risk-rated premiums. We use Chile as a case study due to institutional features that make it a valid benchmark for other countries. Our simulations show that in the presence of self-selection and under a uniform percentage moral hazard reduction across risk types, the absolute moral hazard reduction from a voluntary deductible is indeed expected to be larger in a system with risk-rated premiums than in a system with community-rated premiums. Nevertheless, sensitivity checks show that this conclusion might no longer hold as the percentage moral hazard reduction is lower for high-risk individuals compared to low-risk individuals.
{"title":"Can risk rating increase the ability of voluntary deductibles to reduce moral hazard?","authors":"M Antonini, R C van Kleef, J Henriquez, F Paolucci","doi":"10.1057/s41288-021-00253-3","DOIUrl":"https://doi.org/10.1057/s41288-021-00253-3","url":null,"abstract":"<p><p>Several regulated health insurance markets include the option for consumers to choose a voluntary deductible. An important motive for this option is to reduce moral hazard. In return for a voluntary deductible, consumers receive a premium rebate, which is typically community rated. Under community rating, voluntary deductibles are particularly attractive for low-risk consumers. Since these people use relatively little medical care, the total moral hazard reduction might be relatively small compared to the total healthcare spending. This paper examines the potential moral hazard reduction under risk-rated premiums. We use Chile as a case study due to institutional features that make it a valid benchmark for other countries. Our simulations show that in the presence of self-selection and under a uniform percentage moral hazard reduction across risk types, the absolute moral hazard reduction from a voluntary deductible is indeed expected to be larger in a system with risk-rated premiums than in a system with community-rated premiums. Nevertheless, sensitivity checks show that this conclusion might no longer hold as the percentage moral hazard reduction is lower for high-risk individuals compared to low-risk individuals.</p>","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"48 1","pages":"130-156"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8562369/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"10475787","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01DOI: 10.1057/s41288-021-00255-1
Daehwan Kim, Dong-hwa Lee
{"title":"Correction to: Does private health insurance prevent the onset of critical illness and disability in a universal public insurance system?","authors":"Daehwan Kim, Dong-hwa Lee","doi":"10.1057/s41288-021-00255-1","DOIUrl":"https://doi.org/10.1057/s41288-021-00255-1","url":null,"abstract":"","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"127 1","pages":"266"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"77264482","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01DOI: 10.1057/s41288-023-00287-9
Paul Klumpes
The increasing threat of cyberattacks has resulted in increased efforts by both the U.K. government and regulatory authorities to coordinate efforts to influence cybersecurity risk management practices in the U.K. insurance sector, focusing on cyber risk underwriters. This paper provides an evaluation of these arrangements. It first provides a descriptive overview of the key U.K. regulatory authorities and the evolution of their efforts over the past decade, as well as the scope for broader collaborations with industry and member-based associations and international organisations. It then evaluates the effectiveness of these efforts by providing a multi-method study of the incidence, nature and evolution of cost of data breaches, investment in computer systems and software intangible assets at risk of cyberattack, and a content analysis of annual reports of both U.K. regulators and a sample of U.K. insurers. The findings suggest that while both the total costs of data breaches and the size of investment in computer systems and software intangibles at risk of cyberattack have gradually increased over time, the degree of engagement with cyber as a reporting issue by both cyber insurers and financial regulators has not. It is concluded that while these efforts have been apparently successful in avoiding a large-scale, systemic cyberattack on the U.K. insurance industry, there are significant gaps and overlaps in the system of cyber regulatory oversight.
{"title":"Coordination of cybersecurity risk management in the U.K. insurance sector.","authors":"Paul Klumpes","doi":"10.1057/s41288-023-00287-9","DOIUrl":"https://doi.org/10.1057/s41288-023-00287-9","url":null,"abstract":"<p><p>The increasing threat of cyberattacks has resulted in increased efforts by both the U.K. government and regulatory authorities to coordinate efforts to influence cybersecurity risk management practices in the U.K. insurance sector, focusing on cyber risk underwriters. This paper provides an evaluation of these arrangements. It first provides a descriptive overview of the key U.K. regulatory authorities and the evolution of their efforts over the past decade, as well as the scope for broader collaborations with industry and member-based associations and international organisations. It then evaluates the effectiveness of these efforts by providing a multi-method study of the incidence, nature and evolution of cost of data breaches, investment in computer systems and software intangible assets at risk of cyberattack, and a content analysis of annual reports of both U.K. regulators and a sample of U.K. insurers. The findings suggest that while both the total costs of data breaches and the size of investment in computer systems and software intangibles at risk of cyberattack have gradually increased over time, the degree of engagement with cyber as a reporting issue by both cyber insurers and financial regulators has not. It is concluded that while these efforts have been apparently successful in avoiding a large-scale, systemic cyberattack on the U.K. insurance industry, there are significant gaps and overlaps in the system of cyber regulatory oversight.</p>","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"48 2","pages":"332-371"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9912230/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9505465","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01Epub Date: 2023-04-13DOI: 10.1057/s41288-023-00293-x
Bennet von Skarczinski, Mathias Raschke, Frank Teuteberg
Cyber incidents are among the most critical business risks for organisations and can lead to large financial losses. However, previous research on loss modelling is based on unassured data sources because the representativeness and completeness of op-risk databases cannot be assured. Moreover, there is a lack of modelling approaches that focus on the tail behaviour and adequately account for extreme losses. In this paper, we introduce a novel 'tempered' generalised extreme value (GEV) approach. Based on a stratified random sample of 5000 interviewed German organisations, we model different loss distributions and compare them to our empirical data using graphical analysis and goodness-of-fit tests. We differentiate various subsamples (industry, size, attack type, loss type) and find our modified GEV outperforms other distributions, such as the lognormal and Weibull distributions. Finally, we calculate losses for the German economy, present application examples, derive implications as well as discuss the comparison of loss estimates in the literature.
{"title":"Modelling maximum cyber incident losses of German organisations: an empirical study and modified extreme value distribution approach.","authors":"Bennet von Skarczinski, Mathias Raschke, Frank Teuteberg","doi":"10.1057/s41288-023-00293-x","DOIUrl":"10.1057/s41288-023-00293-x","url":null,"abstract":"<p><p>Cyber incidents are among the most critical business risks for organisations and can lead to large financial losses. However, previous research on loss modelling is based on unassured data sources because the representativeness and completeness of op-risk databases cannot be assured. Moreover, there is a lack of modelling approaches that focus on the tail behaviour and adequately account for extreme losses. In this paper, we introduce a novel 'tempered' generalised extreme value (GEV) approach. Based on a stratified random sample of 5000 interviewed German organisations, we model different loss distributions and compare them to our empirical data using graphical analysis and goodness-of-fit tests. We differentiate various subsamples (industry, size, attack type, loss type) and find our modified GEV outperforms other distributions, such as the lognormal and Weibull distributions. Finally, we calculate losses for the German economy, present application examples, derive implications as well as discuss the comparison of loss estimates in the literature.</p>","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"48 2","pages":"463-501"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10100641/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9502845","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2022-12-21DOI: 10.1057/s41288-022-00279-1
L. Connelly, C. Courbage
{"title":"On insurance and health risks","authors":"L. Connelly, C. Courbage","doi":"10.1057/s41288-022-00279-1","DOIUrl":"https://doi.org/10.1057/s41288-022-00279-1","url":null,"abstract":"","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"9 1","pages":"1-4"},"PeriodicalIF":0.0,"publicationDate":"2022-12-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89121416","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2022-12-10DOI: 10.1057/s41288-022-00282-6
Daniel Zängerle, D. Schiereck
{"title":"Modelling and predicting enterprise-level cyber risks in the context of sparse data availability","authors":"Daniel Zängerle, D. Schiereck","doi":"10.1057/s41288-022-00282-6","DOIUrl":"https://doi.org/10.1057/s41288-022-00282-6","url":null,"abstract":"","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"28 1","pages":"434-462"},"PeriodicalIF":0.0,"publicationDate":"2022-12-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"73933838","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2022-12-04DOI: 10.1057/s41288-022-00281-7
T. Baker, A. Shortland
{"title":"Insurance and enterprise: cyber insurance for ransomware","authors":"T. Baker, A. Shortland","doi":"10.1057/s41288-022-00281-7","DOIUrl":"https://doi.org/10.1057/s41288-022-00281-7","url":null,"abstract":"","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"2 1","pages":"275-299"},"PeriodicalIF":0.0,"publicationDate":"2022-12-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"81212244","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2022-11-19DOI: 10.1057/s41288-022-00280-8
F. Unger, M. Steul-Fischer, Nadine Gatzert
{"title":"How default effects and decision timing affect annuity uptake and health consciousness","authors":"F. Unger, M. Steul-Fischer, Nadine Gatzert","doi":"10.1057/s41288-022-00280-8","DOIUrl":"https://doi.org/10.1057/s41288-022-00280-8","url":null,"abstract":"","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":"869 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2022-11-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84637125","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2022-10-16DOI: 10.1057/s41288-022-00278-2
Mamadou Bah, Nelson Abila
This paper investigates the institutional determinants of insurance demand in Africa. We used a panel of 42 countries over the period 1996-2017. A system GMM approach was used for the estimations. Consistent with previous results, we find that institutional quality has positive and significant effects on insurance penetration in Africa. Specifically, regulatory quality, rule of law, control of corruption, political stability and absence of violence, and government effectiveness are the five institutional quality indicators that have positive and significant effects on the demand for total insurance and life insurance. However, only regulatory quality, control of corruption and government effectiveness are positively associated with non-life insurance demand. This indicates that governments should improve the business environment and strengthen the political environment to boost insurance development in Africa.
Supplementary information: The online version contains supplementary material available at 10.1057/s41288-022-00278-2.
{"title":"Institutional determinants of insurance penetration in Africa.","authors":"Mamadou Bah, Nelson Abila","doi":"10.1057/s41288-022-00278-2","DOIUrl":"10.1057/s41288-022-00278-2","url":null,"abstract":"<p><p>This paper investigates the institutional determinants of insurance demand in Africa. We used a panel of 42 countries over the period 1996-2017. A system GMM approach was used for the estimations. Consistent with previous results, we find that institutional quality has positive and significant effects on insurance penetration in Africa. Specifically, regulatory quality, rule of law, control of corruption, political stability and absence of violence, and government effectiveness are the five institutional quality indicators that have positive and significant effects on the demand for total insurance and life insurance. However, only regulatory quality, control of corruption and government effectiveness are positively associated with non-life insurance demand. This indicates that governments should improve the business environment and strengthen the political environment to boost insurance development in Africa.</p><p><strong>Supplementary information: </strong>The online version contains supplementary material available at 10.1057/s41288-022-00278-2.</p>","PeriodicalId":75009,"journal":{"name":"The Geneva papers on risk and insurance. Issues and practice","volume":" ","pages":"1-42"},"PeriodicalIF":0.0,"publicationDate":"2022-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9572832/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"40660344","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}