In an increasingly digital economy, Cyber risks are growing. Faced with the multitude of vulnerabilities and attack techniques, any quantitative approach to this risk must rely on invariants such as the nature of the consequences for corporations or the motivation of the attackers. Expertise in cyber-security is needed to build a methodological framework capable of integrating these risk determinants but also to overcome the lack of experience and to build a forward-looking approach to adapt to the constant developments in the battlefield of cybernetic warfare.
The digital industry seems to push back the limits of the network effect. The concentration of the players, the standardization of the products and the connectivity of the activities create the conditions for risk accumulation on a large scale. Insurers and reinsurers are thus faced with the pressing need to model this catastrophe risk and must in a few years walk a path that has taken decades for natural risks.
Whether the cyber risk is individual or catastrophic, the insurance industry must create the price signal necessary to reorient the purchasing or usage patterns of economic agents, and in so doing, foster the development of the security and diversity necessary for the sustainability of a digitized economy.
1 Voir le site : https://www.lesechos.fr/2018/04/comment-les-fake-news-manipulent-les-marches-boursiers-988655 ; ou le site : https://www.lemonde.fr/economie-francaise/article/2016/11/23/comment-le-groupe-vinci-victime-d-un-hoax-a-chute-en-bourse_5036269_1656968.html.
2 Voir le site : https://en.wikipedia.org/wiki/Syrian_Electronic_Army.
3 Voir le site : https://en.wikipedia.org/wiki/Iranian_Cyber_Army.
5 Un ransomware, rançongiciel en français, est un logiciel informatique malveillant prenant en otage les données. Le ransomware chiffre et bloque les fichiers contenus sur un ordinateur et demande une rançon en échange d'une clé permettant de les déchiffrer.
6 Voir le site : https://www.cert.ssi.gouv.fr/uploads/CERTFR-2019-ACT-005.pdf.
8 Voir le site : http://fortune.com/2017/05/23/target-settlement-data-breach-lawsuits/.