Effective cyber risk management should include the use of insurance not only to transfer cyber risk but also to provide incentives for insured enterprises to invest in cyber self-protection. Research indicates that asymmetric information, correlated loss, and interdependent security issues make...

While advances in information technology and interconnectivity have improved efficiency for transportation infrastructure, they have also created higher risk associated with cyber systems. The objective of this study is to inform transportation policy and management in the U.S. by identifying...

The fact that "cyber risk" is indeed a collective term for various distinct risks creates great difficulty in communications. For example, policyholders of "cyber insurance" contracts often have a limited or inaccurate understanding about the coverage that they have. To address this issue, we...