Mosaic-backed research shines light on new economics of cyber-risk
Mosaic Insurance, the Bermudian-based global specialty insurance platform, and Mitre, a non-profit organisation that leads US federally funded research and development centres, have released a series of reports examining how frontier artificial intelligence is reshaping the economics of cyber-risk.
The research explores how accelerating cyber threats are challenging traditional approaches to security and risk management, and how chief information security officers (Cisos), insurers, and risk managers must adapt, a joint statement said.
The three-part series explores perspectives around cyber-risk through the lens of cutting-edge AI systems reshaping the threat landscape.
While the past two decades of cybersecurity focused on ways organisations could discover weaknesses faster, patch systems more quickly, and build stronger defences, the series notes frontier AI can expose vulnerabilities and attack paths with unprecedented speed to a broader range of non-specialist threat actors.
Jay Vinda, Mosaic’s group Ciso and cyber-risk engineering lead, said: “Our partnership with Mitre brings together our shared expertise and timely insights, and connects our audiences on a fast-developing landscape.
Mr Vinda co-authored the project with James Tuplin, head of international, cyber at Mosaic and Sanith Wijesinghe, chief engineer for Mitre’s public sector, together with Chris Folk, a senior cybersecurity leader at Mitre.
“The advent of AI means we can now have conversations backed by relevant data, something risk managers haven’t had access to previously,” explained Folk. “A Ciso can now show an underwriter what their exposure is, in terms the underwriter recognises, and insurers can price the difference between an organisation that has looked hard at itself and one that hasn’t.
“Collaborations with forward-leaning partners like Mosaic are helping frame how to take advantage of a crucial window.”
• “Beyond Patch Velocity: Rethinking Cybersecurity Strategy in a Post-Frontier AI World,” which examines how the Ciso operating model may need to evolve
• “Beyond Vulnerability Counts: Reimagining Cyber Insurance Underwriting in a Post-Frontier AI World,” which looks at ways insurers need to rethink underwriting signals, challenge assumptions, and operate in an environment between what exists and what can be seen or discovered
• “Buying Resilience: How Risk Managers Can Close the Gap Between the Ciso and the Boardroom,” which considers how risk managers could help shift executive conversation from indemnity, risk transfer, and mitigation towards building organisational resilience
“The defining question,” the series notes, “is not whether frontier AI changes the cyber threat landscape or if cyber-risk becomes unmanageable or uncertain. It is whether the operating models that underpin cybersecurity, cyber insurance, and enterprise risk management can adapt to the new pace of change and respond quickly enough when disruption occurs.”
You must be Registered or to post comment or to vote.
