A new whitepaper by Zurich Insurance Group and Marsh McLennan highlights the urgent need for public sector collaboration to address the growing cyber risk protection gap. Titled Closing the Cyber Risk Protection Gap, the report emphasises the escalating vulnerability of businesses to cyberattacks and calls for enhanced cyber resilience through public-private partnerships.
The whitepaper cites findings from the Munich Re Cyber Risk and Insurance Survey 2024, which reveals that 87% of global decision-makers believe their organizations are inadequately protected against cyber threats.
With the financial impact of cyberattacks projected to rise from USD 8.5 trillion in 2022 to nearly USD 24 trillion by 2027, the need for effective risk management solutions is increasingly critical.
While the cyber insurance market has grown significantly, with gross written premiums reaching USD 14 billion in 2023 and expected to double by 2027, a substantial protection gap remains.
Uninsured economic losses are estimated at USD 0.9 trillion, particularly affecting small and medium-sized businesses (SMBs), which are often uninsured or underinsured due to affordability and lack of awareness.
Importance of Public-Private Collaboration
Zurich and Marsh McLennan stress that closing the protection gap requires collaboration between the insurance industry and governments. Public-private partnerships can enhance cyber resilience by fostering better data sharing, providing incentives for cybersecurity measures, and implementing regulations to improve cyber hygiene.
Mario Greco, Group CEO of Zurich Insurance, stated, “Large-scale, catastrophic cyber events present risks too great for the private sector alone to bear. Strong public-private partnerships are essential to enhancing cyber resilience.”
John Doyle, President and CEO of Marsh McLennan, echoed this sentiment, calling for collective action to develop innovative solutions and safeguard society from catastrophic cyber events.
Enhancing Cyber Resilience
The whitepaper underscores the need for organizations to adopt best practices and improve their cyber hygiene to raise cyber resilience. This includes ensuring employees are digitally literate and that risk models are improved to better manage the financial impact of cyber incidents.
Navigating Insurable and Non-Insurable Events
The report also emphasizes the importance of understanding the spectrum of insurable and non-insurable cyber events. While some incidents, like mass malware or IT outages, are quantifiable and manageable, others—such as state-sponsored attacks on critical infrastructure—require special consideration and public sector involvement.
The whitepaper calls for a structured data framework and further collaboration between sectors to confront these risks. Initiatives like the Cybersecurity & Infrastructure Security Agency’s (CISA) programs in the US are highlighted as successful examples of public-private cooperation.
Call to Action
Zurich and Marsh McLennan urge the insurance industry and governments to collaborate, innovate, and share data to bridge the cyber risk protection gap. The whitepaper calls for the creation of a cyber framework that addresses the interconnected nature of cyber risks while ensuring accessibility and affordability for businesses.
By working together, the insurance industry and the public sector can foster resilience and protect the global economy from escalating cyber threats.
