Robust industry-specific cyber insurance for large corporates; Fast because it leverages existing security assessments and questionnaires

San Francisco, CA
Joined September 2018
Cyber risk quantification as a really neat use case of building out a custom annotation toolchain and methodology to bootstrap a dataset you’ve aggregated -- how to dedup, clean up, and annotate with new features. buff.ly/2RVfUMH
3
This post shares a method and toolchain for human annotation on top of aggregation to bootstrap data for cyber risk quantification. Curious about scaling this to an open community effort; anyone seen something like that work? cc @CISecurity @FAIRInstitute buff.ly/2RVfUMH
3
Second in the series as we open our cyber risk dataset; how we bootstrapped more robust breach records with an annotation toolchain for @CISecurity controls and loss info for modeling severity to drive @FAIRInstitute Cyber Risk Quantification models buff.ly/2RVfUMH
1
3
Efficiently Bootstrapping Datasets with Machine Aggregation and Human Annotation: a Cyber Risk Case Study that annotates @CISecurity controls to power @FAIRInstitute cyber risk quantification models medium.com/@towerstreetHQ/bo…
1
5
1
8
Which CIS Controls Matter Most: An Empirical Analysis of Cyber Insurance Risk Assessment medium.com/@towerstreetHQ/wh… << Analysis suggests what CISOs have been saying all along; insurers may not be looking at the best data to access security risk.
Deep learning on big dense data has been a bigger focus in the ML community recently, but problems like Cyber Insurance with small sparse data require Bayesian methods. Details here medium.com/@towerstreetHQ/ba…
1
A high level overview of our underwriting models, to be followed by more technical posts: Bayesian Cyber Risk Quantification With Industry-Specific Models medium.com/@towerstreetHQ/ba…
1
Deep learning on big dense data has been a bigger focus in the ML community recently, but problems like cyber insurance with small sparse data require Bayesian methods. Walk through an example: medium.com/@towerstreetHQ/ba…
2
13
2
43
Cybersecurity risk modelers and cyber insurers might want to sign up for the private beta of the world’s most complete breach dataset for cybersecurity risk models medium.com/@towerstreetHQ/th…
1
3
hello friends @CISecurity we have just released a new cybersecurity risk dataset which includes human annotated CIS controls affected at time of breach. Maybe this could be helpful for an upcoming CIS controls revision? medium.com/@towerstreetHQ/th…
1
Security, Risk, and Insurance Peoples: Cost-per-record is a pretty limited model for losses stemming from security incidents. We’re looking for feedback on our industry-specific incident loss modeling. Please share comments on our white paper medium.com/@towerstreetHQ/lo…
Cost-per-record isn’t a legit model to unlock real capacity in the cyber insurance market. We’ve researched around cyber loss costs and summarised in a white paper we want to continuously improve. Please send us your comments and feedback. buff.ly/2F2spAL
2
6
The world's largest insurance and reinsurance balance sheets might like to take on more cyber risk, but they can’t without industry-specific modeling on both the security side and on the financial side. buff.ly/2F2vIba
1
1
5
the $690M in losses announced so far may grow over time. a new bill proposed by warren and others "would have resulted in a $1.5 billion penalty after the Equifax breach revealed in 2017, the bill’s sponsors estimate." fastcompany.com/90345659/eli…
1
1
Tower Street retweeted
#Cybersecurity is not a problem to be solved but a risk to be managed. Learn more from this @towerstreetHQ whitepaper towerstreet.co/campaigns/ts-… and watch our on-demand webinar youtube.com/watch?v=E2wHHP89…
1
4