CIRC 2018 - 2018 International Workshop on Cyber Insurance and Risk Controls

Insurance companies are facing new challenges with the increasing demand for policies to cover cyber incidents such as data breaches and business interruption. Traditional risk assessments are no longer enough to understand the business impact of a cyber-attack. Cyber Value-AT-Risk (CVaR) models have been proposed to quantify security incidents, but they are still quite limited in understanding the specifics of each company and quantifying the risk for a large number of feasible scenarios. A more holistic approach should be considered, but the lack of data and understanding of risks, makes it a challenging problem. In this workshop we solicit research papers and latest advances in the topic of cyber insurance, as well as case analyses that examine the effectiveness of current security controls.
Topics of interest include, but are not limited to the following:
Cyber Insurance
Cyber Risk Assessment
Cyber Risk Propagation
Security Controls and Standards
Cybersecurity Metrics and their Measurements
Maturity Models and Frameworks
Cyber Value-AT-Risk (CVaR)
Cyber Economics
Economics Approaches for Cybersecurity
Cyber Harm