Steering Through a Transitioning Cyber Insurance Market
By: Michelle Chia
With two decades of experience in cyber, technology, and professional liability insurance, Michelle Chia has witnessed the evolution of the industry firsthand. Over the past ten years, she’s built successful teams, focusing on operational efficiency, product innovation, and public-private partnerships. Before her current role as Chief Underwriting Officer for Cyber, Design and Select Professionals in the Americas at AXA XL, Michelle led Professional Liability and Cyber at Zurich North America. She holds degrees from Tufts University and The Wharton School of the University of Pennsylvania.
The cyber insurance market is currently undergoing a significant transformation. While cyber threats continue to evolve and become more sophisticated, insurance rates have been trending downward, and competition among insurers has intensified. This shift presents both opportunities and challenges for businesses seeking cyber coverage.
The Dynamics of a Shifting Market
Several factors are contributing to the decline in premiums despite the persistent cyber threat landscape. A surge in the number of insurers offering cyber policies has expanded market capacity, resulting in more competitive pricing. Established companies are broadening their offerings, and new entrants are attempting to gain market share through aggressive pricing strategies.
Businesses have also become more proactive in addressing cyber risks, which is positively impacting the market. Investments in cybersecurity infrastructure, employee training, and compliance programs have led to a decrease in the frequency and severity of claims. Insurers have refined their underwriting models, utilizing more advanced risk assessments, rewarding businesses with robust security postures through better rates.
While ransomware attacks remain a serious concern, some insurers are observing a decrease in large-scale claims. Law enforcement efforts, improved backup solutions, and heightened awareness of cybercrime schemes have helped reduce losses.
The Threat of Cumulative Incidents
Even though the cyber insurance market shows some positive signals, the increasing frequency and severity of cyberattacks, encompassing ransomware, data breaches, and business email compromise, continue to challenge the industry. Beyond these high-profile incidents, a multitude of smaller events can accumulate, leading to substantial losses for insurers. This phenomenon mirrors the idiom of “death by a thousand paper cuts,” where individual incidents may seem manageable, but collectively overwhelm defenses.
Cyber market has seen many high-profile incidents, but few have been “cyber hurricanes.” In contrast to property insurance, where events like Hurricanes Andrew and Katrina triggered significant market changes, recent cyber incidents have been substantial, but of a different nature. However, collectively they have the potential to negatively impact cyber insurers and ongoing market commitment, as the frequency of these types of events increases.
Market Parallels and the Need for Agility
The dynamics of the cyber insurance market share similarities with those seen in other insurance segments, such as property and casualty. Both have experienced periods of “hard” and “soft” market conditions. Much like the casualty market adjusts premiums based on claims experience, the cyber insurance sector adjusts pricing in response to evolving risks. Premiums rose sharply between 2020 and 2022 due to escalating ransomware attacks; however, the current trend shows a decline in rates due to increased market capacity and competition.
The cyber insurance market faces unique and rapidly evolving cyber risks, which necessitates the industry to stay agile and responsive. Careful attention to underwriting discipline and the aggregation of cyber risks is essential. Insurers must remain vigilant, as high loss ratios, increased competition and evolving regulatory pressures can impact the sustainability of coverage.
What Businesses Should Do Now
With the current market’s competitiveness, businesses have a valuable opportunity for getting affordable cyber insurance coverage. However, to ensure they obtain suitable cyber coverage and are well-prepared for potential price changes, following a strategic approach is advised:
- Compare multiple providers: Evaluate quotes from different insurers to find the best combination of price, coverage, underwriting, and claims experience.
- Prioritize claims-paying experience: Choose established insurers with proven track records for efficient handling of complex claims.
- Continue to invest in cybersecurity: Maintain strong security measures, which can help secure lower premiums and extensive coverage.
- Understand policy terms: Carefully read coverage limits, exclusions, and response services to avoid coverage gaps.
- Take advantage of your insurer’s proactive cybersecurity services: Utilize services like risk assessments and threat intelligence, which are offered by many insurers, including AXA XL.
- Work with your broker: An experienced broker can help navigate the market and find coverage that is tailored to your specific needs.
Conclusion: A Pivotal Moment
The cyber insurance market is at a pivotal moment. Stable loss ratios and disciplined underwriting could maintain competitive rates, allowing businesses to secure comprehensive coverage. However, economic conditions can influence risk perception and pricing. The potential impact of cumulative claims from minor cyber incidents and the escalation of attack frequency could lead to pricing adjustments.
Businesses should focus on using current market conditions while also preparing for potential fluctuations. Investing in risk management and building a culture of cybersecurity awareness are essential for successfully navigating the complexities of the cyber insurance market.
Risk Insiders are an unrivaled group of leading executives focused on the topic of Risk. They share their insights and opinions – and from time to time their pet peeves and gripes. Each Risk Insider is invited to publish based on their expertise, passion and/or the quality of their writing. The only rules are no selling and no competitor put-downs. The views expressed in this article belong to the author and are not an editorial opinion of Risk & Insurance.
