Skip to main content
The Actuary: The magazine of the Institute and Faculty of Actuaries - return to the homepage Logo of The Actuary website
  • Search
  • Visit The Actuary Magazine on Facebook
  • Visit The Actuary Magazine on LinkedIn
  • Visit @TheActuaryMag on Twitter
Visit the website of the Institute and Faculty of Actuaries Logo of the Institute and Faculty of Actuaries

Main navigation

  • News
  • Features
    • General Features
    • Interviews
    • Students
    • Opinion
  • Topics
  • Knowledge
    • Business Skills
    • Careers
    • Events
    • Predictions by The Actuary
    • Whitepapers
    • Moody's - Climate Risk Insurers series
    • Webinars
    • Podcasts
  • Jobs
  • IFoA
    • CEO Comment
    • IFoA News
    • People & Social News
    • President Comment
  • Archive
Quick links:
  • Home
  • The Actuary Issues
  • January 2018
01

Cyber: don't catch your tail in the door 

Open-access content Tuesday 6th February 2018 — updated 5.50pm, Wednesday 29th April 2020

Insurers and reinsurers should transact in cyber risk now to gain the advantage in this class of business, says Tom Johansmeyer

2


Nearly every conversation I've had about large cyber losses has taken on a doomsday quality. There is chat about the grid going down, financial markets in disarray, total mayhem in every conceivable way. While plenty of bad stuff can happen without sending the world into crisis, it's hard to get past the ugly with cyber. But if the cyber insurance market is going to reach its full potential, we will need to understand what 'bad' means, without going straight to 'the end of the world as we know it'.

Cyber is generally assumed to be a long-tail class of business. In the case of 'silent' cyber, when a cyber event triggers a loss to a non-cyber programme, the potential for complexity, dispute and expense can grow the tail even more. However, counter-intuitively, large 'affirmative' cyber risk losses are less likely to be litigious, in the short term at least. That is because cyber insurance is woefully underpenetrated - which explains the massive growth projections predicted around the global insurance industry. For the time being, this means there should be many events for which economic losses are unprotected and some where the economic losses are far larger than the insurance protection secured.

So, thanks to the potential for outsized economic losses relative to smaller programmes, cyber is currently effectively a short-tail line - despite prevailing market views to the contrary.

Let's take a look at two concrete examples: the recent Equifax and Southwest Airlines cyber attacks. Both are designated as PCS Global Cyber loss events from 2017, in that they exceeded the US$20m minimum threshold on affirmative cyber. With economic losses far in excess of coverage limits, Equifax was easy to understand. It was clear early on that the cyber tower (threshold) would be fully utilised. Southwest, on the other hand, is a bit more challenging. Currently, PCS Global Cyber has the industry loss below the limit available, and there is talk of further movement. 


Present and future 

Of the eight loss events in the PCS Global Cyber historical database that originated in 2014, seven are not only closed but blew through the top of the tower. While the overall economic loss situation may have been difficult to understand and estimate, the insured loss was relatively easy to ascertain. Meanwhile, the Southwest loss is indicative of future challenges because it falls below the top of the tower. As a market, we are now stuck waiting for all the difficult work to be done before we can understand the magnitude of the insured loss. 

To understand what the future holds, multiply the numbers involved in the Southwest insured loss event by 10. Think about a US$1bn loss that requires loss adjusting for an event that could reach to many hundreds of millions of dollars. That sort of future may be a few years off, but there are plenty of signs that it is coming. Already, affirmative cyber programmes placements have begun to exceed US$500m, meaning that, under current conditions, past major losses would have been far more complex to settle. 

Today's short tail provides a learning opportunity for tomorrow's long tail. Insurers and reinsurers can transact in cyber risk now (particularly on an industry loss warranties or ILW basis) to begin to gain practical experience in this class of business. As the tail on cyber grows, though, the door closes on the short-tail opportunity. Until that happens, reinsurers and insurance-linked securities (ILS) funds have the chance to write what's effectively short-tail business while also buying time to better understand the underlying risk, enabling them to continue to write it as the tail gets longer. 

In the end, the industry will be able to evolve alongside the risk. As insurance penetration increases and losses become more complex, experience and data will fill the gaps to help underwriters make better decisions; from evaluating original risk to transferring what they don't want to keep on the books. 

This is a rare dynamic: being able to trade early to understand a difficult risk later. To pass on this opportunity is to play catch-up when competitors will have already learnt the game.


Tom Johansmeyer is assistant vice-president and co-head, PCS, at Verisk Insurance Solutions


This article appeared in our January 2018 issue of The Actuary.
Click here to view this issue
Filed in
01

You might also like...

Share
  • Twitter
  • Facebook
  • Linked in
  • Mail
  • Print

Latest Jobs

Environmental, Social and Governance- GI Actuary

England, London
£70000 - £170000 per annum
Reference
145888

Calling All Australian Actuaries

England, London
£50000 - £120000 per annum
Reference
145887

Calling all GI Actuaries looking to move into contracting

England, London
£700 - £1000 per day
Reference
145886
See all jobs »
 
 

Today's top reads

 
 

Sign up to our newsletter

News, jobs and updates

Sign up

Subscribe to The Actuary

Receive the print edition straight to your door

Subscribe
Spread-iPad-slantB-june.png

Topics

  • Data Science
  • Investment
  • Risk & ERM
  • Pensions
  • Environment
  • Soft skills
  • General Insurance
  • Regulation Standards
  • Health care
  • Technology
  • Reinsurance
  • Global
  • Life insurance
​
FOLLOW US
The Actuary on LinkedIn
@TheActuaryMag on Twitter
Facebook: The Actuary Magazine
CONTACT US
The Actuary
Tel: (+44) 020 7880 6200
​

IFoA

About IFoA
Become an actuary
IFoA Events
About membership

Information

Privacy Policy
Terms & Conditions
Cookie Policy
Think Green

Get in touch

Contact us
Advertise with us
Subscribe to The Actuary Magazine
Contribute

The Actuary Jobs

Actuarial job search
Pensions jobs
General insurance jobs
Solvency II jobs

© 2023 The Actuary. The Actuary is published on behalf of the Institute and Faculty of Actuaries by Redactive Publishing Limited. All rights reserved. Reproduction of any part is not allowed without written permission.

Redactive Media Group Ltd, 71-75 Shelton Street, London WC2H 9JQ