The cost of cybersecurity incidents is large and growing. However, conventional methods for measuring loss and choosing mitigation strategies use simplifying assumptions and are often not supported by cyber attack data. In this paper, we present a multivariate model for different, dependent...

Operational risk constitutes a large portion of a bank’s risk exposure. Unlike other financial risks, operational risk is classified as a pure risk (only an opportunity of a loss), as it always leads to a financial loss for a bank. The failure to mitigate and manage operational risk...