On the Extraction of Cyber Risks using Structured Products

The aim of this paper is to develop an approach to extract information about cyber risks from structured financial products. We consider decision makers that are interested in extracting information about the uncertainty of Cyber risks. The value of information can be evaluated using recently developed entropy approaches in Finance. The underlying idea is that what we call Arrow-Debreu Cyber Risk state prices can be extracted provided the right structured products be “created”. It is shown that different market based approaches can be used to get a better idea of the shape of the loss distribution facing firms. This information is potentially of interest to evaluate the risk premiums of insurance products. Comparisons between extracted market expectations can also be informative for risk evaluation, notably the distribution of unexpected losses and the eventual shortfall calculations. Finally, recent information-theoretic approaches enable us to make the link between pricing and the value of information to investors