A Generalized Linear Mixed Model for Data Breaches and its Application in Cyber Insurance

30 Pages Posted: 7 Apr 2022

See all articles by Meng Sun

Meng Sun

Simon Fraser University

Yi Lu

Simon Fraser University

Abstract

Data breach incidents result in severe financial loss and reputational damage, which raises the importance of using insurance to manage and mitigate cyber related risks. We analyze data breach chronology collected by Privacy Rights Clearinghouse (PRC) since 2001 and propose a Bayesian generalized linear mixed model for data breach incidents. Our model captures the dependency between frequency and severity of cyber losses, and the behavior of cyber attacks on entities across time. Risk characteristics such as types of breach, types of organization, entity locations in chronology, as well as time trend effects are taken into consideration when investigating breach frequencies. Estimations of model parameters are presented under Bayesian framework using a combination of Gibbs sampler and Metropolis-Hastings algorithm. Predictions and applications of the proposed model in enterprise risk management and cyber insurance rate filing are discussed.

Keywords: Cyber Risk, Generalized linear mixed model, Bayesian, MCMC, Metropolis-Hastings algorithm

Suggested Citation

Sun, Meng and Lu, Yi, A Generalized Linear Mixed Model for Data Breaches and its Application in Cyber Insurance. Available at SSRN: https://ssrn.com/abstract=4077521 or http://dx.doi.org/10.2139/ssrn.4077521

Meng Sun (Contact Author)

Simon Fraser University ( email )

8888
University Drive
Burnaby, V5A1S6
Canada

Yi Lu

Simon Fraser University ( email )

8888
University Drive
Burnaby, V5A1S6
Canada

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
23
Abstract Views
92
PlumX Metrics