![Page 1: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/1.jpg)
Welcome to the
Cyber Risk Insights
Conference!
@Advisen #CyberRisk
![Page 2: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/2.jpg)
Welcoming Remarks
Rebecca Bole
SVP, Research & Editorial Division
Advisen @Advisen #CyberRisk
![Page 3: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/3.jpg)
Leading the way to smarter and more
efficient risk and insurance communities,
Advisen delivers:
the right information into
the right hands at
the right time
to power performance.
![Page 4: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/4.jpg)
Thank you to our Sponsors
![Page 5: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/5.jpg)
Our 2015 Cyber Risk Awards Hosts!
Jeremy Gittler
XL Catlin
Graeme Newman
CFC Underwriting
Tom Srail
Willis
![Page 6: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/6.jpg)
2015 Cyber Risk Awards Advisen’s Cyber Risk Network Person of the Year
Cyber Risk Industry Person of the Year – USA
Cyber Risk Industry Person of the Year – London Market
Cyber Risk Industry Person of the Year – International
Cyber Risk Event Response Team of the Year
Cyber Risk Pre-Breach Team of the Year
Cyber Risk Innovation of the Year
Cyber Service Vendor of the Year
Best Cyber Risk Broking Team
Best Cyber Risk Insurer
![Page 8: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/8.jpg)
Opening Remarks
Elisabeth Case
SVP-Commercial E&O Practice Leader
Marsh FINPRO
2015 Conference Chair @Advisen #CyberRisk
![Page 9: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/9.jpg)
Keynote Address
Robert Holley Special Agent in Charge, Chicago Division
FBI
![Page 10: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/10.jpg)
The Headlines from the
Cyber Risk Network
Chad Hemenway
Managing Editor
Advisen
![Page 11: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/11.jpg)
For more information about subscriptions
contact Jim Delaney at [email protected]
The Headlines from the Cyber Risk
Network are available to members of the Cyber Risk Network only.
![Page 12: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/12.jpg)
“Who goes there?!”
@Advisen #CyberRisk
![Page 13: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/13.jpg)
“Who goes there?!”
Melissa Ventrone Partner and Chair of Data Privacy & Security,Wilson Elser
Moderator
![Page 14: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/14.jpg)
“Who goes there?!” • Melissa Ventrone, Partner and Chair of Data Privacy &
Security, Wilson Elser (Moderator)
• Quincy Castro, Internet Security Researcher,
Team Cymru
• Darren Guccione, CEO and Co-Founder, Keeper Security
• Jamie Murdock, Chief Information Security Officer,
Binary Defense Systems
• Christopher Novak, Director, Global Investigative
Response, Verizon RISK Team
![Page 15: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/15.jpg)
Case studies Corporate / political
Utilities and other critical infrastructure companies Financial institutions Very Large Retailers
![Page 16: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/16.jpg)
Corporate / political
case study
Actors behind these types of attacks? Attacks by
one actor, or actors working together?
Motivation behind attacks? What information are
they targeting? What do they do with the
information?
Tools and techniques used in attacks?
![Page 17: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/17.jpg)
Activity volumes by time for a state sponsored group
![Page 18: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/18.jpg)
Utilities and other critical
infrastructure companies
Actors behind these types of attacks? Attacks by
one actor, or actors working together?
Motivation behind attacks? What information are
they targeting? What do they do with the
information?
Tools and techniques used in attacks?
![Page 19: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/19.jpg)
Financial institutions
case study
Actors behind these types of attacks? Attacks by
one actor, or actors working together?
Motivation behind attacks? What information are
they targeting? What do they do with the
information?
Tools and techniques used in attacks?
![Page 20: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/20.jpg)
Very large retailers
case study
Actors behind these types of attacks? Attacks by
one actor, or actors working together?
Motivation behind attacks? What information are
they targeting? What do they do with the
information?
Tools and techniques used in attacks?
![Page 21: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/21.jpg)
Should people care? What should corporate security teams be
concerned about?
![Page 22: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/22.jpg)
“Who goes there?!”
![Page 23: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/23.jpg)
Morning Break
Coming up – “The Risk Management Perspective”
@Advisen #CyberRisk
![Page 24: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/24.jpg)
Thank you to our Sponsors
![Page 25: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/25.jpg)
Claims Satisfaction Survey Report
Purchase the report today!
$579+tax
For more information and to purchase the report:
http://www.advisenltd.com/research/claims-
satisfaction-survey-report/
![Page 26: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/26.jpg)
The Risk Management
Perspective
@Advisen #CyberRisk
![Page 27: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/27.jpg)
Meredith Schnur
Professional Risk & National Practice Leader, Wells Fargo
Moderator
The Risk Management
Perspective
![Page 28: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/28.jpg)
• Meredith Schnur, Professional Risk and National
Practice Leader, Wells Fargo (Moderator)
• Josh Harwood, Director of Risk Management, TDS
• Vitas Plioplys, Director of Risk Management,
Experian
The Risk Management
Perspective
![Page 29: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/29.jpg)
The Risk Management
Perspective
![Page 30: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/30.jpg)
Insurance Coverage
and Coverage Issues
@Advisen #CyberRisk
![Page 31: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/31.jpg)
Insurance Coverage and
Coverage Issues
Molly McGinnis Stine
Partner of Cyber Insurance Group, Locke Lord
Moderator
![Page 32: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/32.jpg)
• Molly McGinnis Stine, Partner of Cyber Insurance Group,
Locke Lord (Moderator)
• Brian Brown, President, CyberSpecialist Group
• Elissa Doroff, Vice President, Underwriting and Product
Manager, Cyber/Technology, XL Catlin
• Kirstin Simonson, 2VP, Underwriting Director, Global
Technology, Travelers
• Greg Vernaci, Head of Cyber, US & Canada, Financial
Lines, AIG
Insurance Coverage and
Coverage Issues
![Page 33: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/33.jpg)
Insurance Coverage and
Coverage Issues
![Page 34: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/34.jpg)
Conference Luncheon
Coming up – “Selling Cyber to Small and Medium Enterprise”
@Advisen #CyberRisk
![Page 35: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/35.jpg)
Thank you to our Sponsors
![Page 36: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/36.jpg)
Claims Satisfaction Survey Report
Purchase the report today!
$579+tax
For more information and to purchase the report:
http://www.advisenltd.com/research/claims-
satisfaction-survey-report/
![Page 37: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/37.jpg)
Selling Cyber to the
Small and Medium
Enterprise
@Advisen #CyberRisk
![Page 38: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/38.jpg)
Selling Cyber to the
Small and Medium Enterprise
Lauren Gorte
Assistant Vice President, Professional Risk, ACE USA
Moderator
![Page 39: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/39.jpg)
• Lauren Gorte, Assistant Vice President, Professional
Risk, ACE USA (Moderator)
• Akhil Chopra, Senior Vice President, QSG-FINPRO-Errors
and Omissions, Marsh
• David Hallstrom, Technology Underwriting Director, CNA
• Brian Thornton, President, ProWriters
• Dave Wasson, Professional and Cyber Liability Practice
Leader, Hays Companies
Selling Cyber to the
Small and Medium Enterprise
![Page 40: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/40.jpg)
Selling Cyber to the
Small and Medium Enterprise
![Page 41: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/41.jpg)
The Cyber
Terrorism Threat
@Advisen #CyberRisk
![Page 42: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/42.jpg)
The Cyber Terrorism Threat
John Mullen
Partner, Lewis Brisbois
Moderator
![Page 43: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/43.jpg)
• John Mullen, Partner, Lewis Brisbois (Moderator)
• Nick Economidis, E&O Underwriter, Beazley
• Bill Hardin, Managing Director and Co-Chair, Global Data
Privacy and Incident Response Practice, Navigant
• Matthew McCabe, SVP of Network Security and Privacy,
Marsh FINPRO
• Eric Shiffman, Supervisory Special Agent,
FBI Chicago Division
The Cyber Terrorism Threat
![Page 44: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/44.jpg)
The Cyber Terrorism Threat
![Page 45: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/45.jpg)
Afternoon Break
Coming up – “Harnessing the Numbers”
@Advisen #CyberRisk
![Page 46: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/46.jpg)
Thank you to our Sponsors
![Page 47: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/47.jpg)
Claims Satisfaction Survey Report
Purchase the report today!
$579+tax
For more information and to purchase the report:
http://www.advisenltd.com/research/claims-
satisfaction-survey-report/
![Page 48: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/48.jpg)
Harnessing the
Numbers
@Advisen #CyberRisk
![Page 49: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/49.jpg)
Harnessing the Numbers
Bo Holland
Founder and CEO, AllClear ID
Moderator
![Page 50: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/50.jpg)
• Bo Holland, Founder and CEO, AllClear ID (Moderator)
• Douglas Hubbard, Inventor and Founder,
Hubbard Decision Research
• Catherine Rudow, SVP, Specialty Casualty, PartnerRe US
• Scott Stransky, Manager and Principal Scientist,
AIR Worldwide
• Alice Underwood, Executive Vice President, Willis Re
Harnessing the Numbers
![Page 51: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/51.jpg)
51 CONFIDENTIAL ©2015 AIR WORLDWIDE
AIR’s Stochastic Modeling Framework Can Be Applied to Cyber
Policy Conditions
Exposure Information
Damage Estimation
Loss Calculation
Policy Conditions
Limit
Deductible
ENGINEERING
FINANCIAL Intensity Calculation
Event Generation
HAZARD
![Page 52: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/52.jpg)
52 CONFIDENTIAL ©2015 AIR WORLDWIDE
The “Hurricane Andrew” of Cyber Is Coming
![Page 53: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/53.jpg)
CYBER RISK MODELING WITH PRISM-RE
© Copyright 2015 Willis Limited / Willis Re Inc. All rights reserved: No part of this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photocopying, recording, or otherwise, without the permission of Willis Limited/Willis Re Inc. Nothing herein constitutes or should be construed as constituting legal or any other form of professional advice. This document is for general information only, is not intended to be relied upon, and action based on or in connection with anything contained herein should not be taken without first obtaining specific advice from a suitably qualified professional. The provision of any services by Willis Re Inc / Willis Limited will be subject to the agreement of contractual terms and conditions acceptable to all parties.
Advisen Cyber Risk Insights Conference Chicago May 18, 2015
![Page 54: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/54.jpg)
PRISM-Re framework
54
PRISM-Re
Probability distribution of loss ($ and counts)
Portfolio analysis
Reinsurance optimization
Enterprise risk management
Rate of
privacy breach
Number & type of records affected
Cost per record
Common shock model
(contagion)
Insurer portfolio information: per insured Industry sector
Annual revenue (or other exposure)
Policy limit and deductible
![Page 55: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/55.jpg)
PRISM-Re mechanics
55
Rate of
privacy breach
Number and
type affected
Cost
per record Common shock
Separate regression model for each sector
Within and/or across industry sectors
Total records
PHI
PII
PCI
Forensics & crisis
mgt
Credit & ID monitoring
Regulatory defense &
fines
Civil liability
![Page 56: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/56.jpg)
PRISM-Re simulation process
56
PRISM-Re
Probability distribution of loss ($ and counts)
Rate of
privacy breach
Number & type of records affected
Cost per record
Common shock model
(contagion)
![Page 57: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/57.jpg)
CYBER RISK MODELING WITH PRISM-RE Advisen Cyber Risk Insights Conference Chicago May 18, 2015
© Copyright 2015 Willis Limited / Willis Re Inc. All rights reserved: No part of this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photocopying, recording, or otherwise, without the permission of Willis Limited/Willis Re Inc. Nothing herein constitutes or should be construed as constituting legal or any other form of professional advice. This document is for general information only, is not intended to be relied upon, and action based on or in connection with anything contained herein should not be taken without first obtaining specific advice from a suitably qualified professional. The provision of any services by Willis Re Inc / Willis Limited will be subject to the agreement of contractual terms and conditions acceptable to all parties.
![Page 58: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/58.jpg)
© Hubbard Decision Research, 2013
The Biggest Cybersecurity Risk
Question: What is Your Single Biggest Risk in Cybersecurity? Answer: How You Measure Cybersecurity Risk
58
![Page 59: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/59.jpg)
© Hubbard Decision Research, 2013
Can Organizations Do Better than “High, Medium, Low?”
59
What if we could measure risk more like an actuary – “The probability of losing more than $10 million due to security incidents in 2016 is 16%”
What if we could prioritize security investments based on a “Return on Mitigation”?
This means there is about a 40% chance of losing more than $10M in a year and about a 10% chance of losing more than $200M.
Expected
Loss/Yr
Cost of
Control
Control
Effectiveness
Return on
Control Action
DB Access $24.7M $800K 95% 2,832% MitigatePhysical Access $2.5M $300K 99% 727% MitigateData in Transit $2.3M $600K 95% 267% MitigateNetwork Access Control $2.3M $400K 30% 74% MitigateFile Access $969K $600K 90% 45% MonitorWeb Vulnerabilities $409K $800K 95% -51% TrackSystem Configuration $113K $500K 100% -77% Track
![Page 60: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/60.jpg)
Harnessing the Numbers
![Page 61: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/61.jpg)
Data Breach
Simulation Exercise
@Advisen #CyberRisk
![Page 62: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/62.jpg)
Data Breach Simulation Exercise
Elisabeth Case
SVP – Commercial E&O Practice Leader, Marsh FINPRO
Moderator
![Page 63: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/63.jpg)
• Elisabeth Case, SVP-Commercial E&O Practice Leader,
Marsh FINPRO (Moderator)
• Marcello Antonucci, Claims Manager, Beazley
• Randy Krause, President and CEO, ePlace Solutions
• Fausto Molinet, Cyber Security Consultant,
Delta Risk
• Melissa Ventrone, Partner and Chair of Data Privacy &
Security, Wilson Elser
Data Breach Simulation Exercise
Observation Team
![Page 64: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/64.jpg)
Cyber event
simulation exercise May 15th, 2015, Chicago
![Page 65: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/65.jpg)
What was the exercise?
On Friday, Advisen hosted a cyber incident
simulation exercise that saw a selected teams of
experts – representing the various stakeholders in
a real event – work through a mock cyber incident
in real time.
An observation team critiqued the handling of the
incident and now report back some best practices
and key takeaways from the exercise.
![Page 66: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/66.jpg)
Who took part? Red Team: A group of cyber security experts who
devised the mock incident to be as realistic as
possible and to test the ‘corporation’ to its limits.
Also acted as external resources to the Blue Team
in crisis response
Blue Team: A select group representing the key
cyber stakeholders within the corporation under
attack. This team – made of board members and
operations executives played roles on the day
![Page 67: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/67.jpg)
The scenario • Aston Maureen global car manufacturing
company
• Chicago headquartered – dozens of worldwide
locations
• 30,000 employees – $25 billion revenue
• Produces very high-end to basic vehicles
• Extreme luxury KITT car is custom-ordered and
personalized to buyer. Bought by wealthiest
people in the world
![Page 68: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/68.jpg)
What happened next?
Monday, 9am: FBI find intellectual property
(relating to engineering/manufacturing process)
on a remote computer…
![Page 69: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/69.jpg)
Set-up to fail… • Team-members don’t work together regularly
• Poorly defined policies & procedures
• Processes undefined (ad hoc actions)
• Unknown obligations for third parties
• No overall picture of the event
![Page 70: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/70.jpg)
Unfair? The Blue Team responded exactly the same as many
companies who do exercises
•Lack of plans for quick action
•No correlation of activities, incidents and access
•Silos of activity without coordination
•Knee-jerk reaction to events that could be nothing
(reacting prior to identification)
•Panic when hearing “PII” involvement (or even
alleged)
![Page 71: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/71.jpg)
Learning points
![Page 72: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/72.jpg)
Get the right team Define their roles
![Page 73: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/73.jpg)
Have a plan Communication plan is critical
![Page 74: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/74.jpg)
Make your plan
cyber-specific Integrate cyber into your existing, physical, plans
![Page 75: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/75.jpg)
Drill your plan Make it second-nature
![Page 76: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/76.jpg)
Key takeaways 1. Do you have existing plans? If so, integrate
cyber into them
2. Do you have developed relationships with
service providers. Identify external
relationships now
3. Practice, practice, practice…
4. Get the right people on board
![Page 77: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/77.jpg)
Red Team Participants
•Melanie Dougherty Thomas, Inform
•Fausto Molinet, Delta Risk
•Chris Pogue, Nuix
•Melissa Ventrone, Wilson Elser
Simulation Exercise
@Advisen #CyberRisk
![Page 78: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/78.jpg)
Blue Team Participants
• Joe Abrenio, Delta Risk
• Jesus Gonzalez, Aon
• Peter Karutz, MDD
• Winston Krone, Kivu Consulting
• Tom Laughran, FleishmanHillard
• Jamie Murdock, Binary Defense Systems
• Michael Tomlinson, Tomlinson Law
Simulation Exercise
@Advisen #CyberRisk
![Page 79: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/79.jpg)
Observation Team
![Page 80: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/80.jpg)
Closing Remarks &
Reception
@Advisen #CyberRisk
![Page 81: Welcome to the Cyber Risk Insights Conference!...May 18, 2015 · Perspective . The Risk Management Perspective . Insurance Coverage and Coverage Issues @Advisen #CyberRisk . Insurance](https://reader034.vdocument.in/reader034/viewer/2022043000/5f761584c178d77fe4523bbf/html5/thumbnails/81.jpg)
Thank you to our Sponsors