2025-06-24-兰德-承保灾难性网络风险（英）_86页_943kb

Cyber Risk Insurance Report Summary

This report examines the challenges of insuring catastrophic cyber risks and recommends a federal solution.

Key Points

• Threat Landscape: Increasingly connected systems and evolving threats make cyber protection difficult for firms.
• Cyber Risk Duality: Distinction between attritional (small, frequent losses) and catastrophic (massive, aggregated losses) cyber events.
• Current Market Trends: Cyber insurance market has grown significantly but faces gaps in coverage for catastrophic events, high premiums due to capital requirements, and limited capacity.
• Federal Response Proposal: A two-tier Cyber Risk Insurance Program (CRIP) covering:
  1. Tower 1: War, terrorism, and infrastructure events with high public-risk sharing.
  2. Tower 2: Other cyber losses removing tail risk while preserving private sector participation.
• Implementation Considerations: Avoid imposing cybersecurity standards, cautiously evaluate ransomware coverage bans, and establish centralized data collection for risk analysis.

Conclusion

The private market cannot fully address catastrophic cyber risks, necessitating government intervention to enhance resilience and reduce economic vulnerability.