Committee on Cyber Risk
The Committee on Cyber Risk is looking at actuarial aspects of cyber risks. Specifically, it is focused on named and excluded perils and on latent exposures in both commercial and personal lines. Generally, the committee is not looking at enterprise risk to insurers themselves.
Chairperson:
Wanchin Chou
Vice Chairperson:
Sam Tashima
Members:
Eduard Alpin
Zhe-Hao Chan
Edmund Douglas
Kayla Greeson
Frank Grossman
Weiyue Gu
Denis Guenthner
Nicky Inkrais Witras
Bobby Jaegers
Derek Jones
Janet Kang-Gurvin
Misu Kim
Kathryn Koch
Laura Maxwell
Isabelle McCullough
Jason Pessel
Bernard Rabinowitz
Ashley Stoffel
Thomas Struppeck
Ernest Wilson
Zhe-Hao Chan
Edmund Douglas
Kayla Greeson
Frank Grossman
Weiyue Gu
Denis Guenthner
Nicky Inkrais Witras
Bobby Jaegers
Derek Jones
Janet Kang-Gurvin
Misu Kim
Kathryn Koch
Laura Maxwell
Isabelle McCullough
Jason Pessel
Bernard Rabinowitz
Ashley Stoffel
Thomas Struppeck
Ernest Wilson
Related Publications
Cyber Risk Toolkit: SEC Cybersecurity Disclosure Requirements and Related Directors & Officers Liability Risks
"SEC Cybersecurity Disclosure Requirements and Related Directors & Officers Liability Risks,” the latest release in the Cyber Risk Toolkit, details how the United States Securities and...
Topics: Casualty Cyber Risk
Date Published: 05/08/2025
Read More
Cyber Risk Committee Presentation at MAF
Members of the Committee on Cyber Risk presented during the Midwestern Actuarial Forum (MAF) on the Academy’s Cyber Risk Toolkit, highlighting recent work around cyber data, the state of the cyber...
Topics: Casualty Cyber Risk
Date Published: 03/29/2024
Read More
Cyber Risk Committee Presentation at NAIC
Academy Senior Fellow Rich Gibson provided a brief overview of the Committee on Cyber Risk to NAIC’s Cybersecurity (H) Working Group. The presentation highlighted the cyber risk toolkit, including...Date Published: 03/17/2024
Read More
Cyber Risk Toolkit: Personal Cyber--An Intro to Risk Reduction and Mitigation Strategies
The Committee on Cyber Risk released a new chapter in the Cyber Risk Toolkit, "Personal Cyber: An Intro to Risk Reduction and Mitigation Strategies." The chapter identifies some of the penetration...
Topics: Casualty Cyber Risk
Date Published: 10/30/2023
Read More
Presentation on Cyber Risk at CREAR Cyber Conference
Director of Research Steve Jackson presented on cyber risk at an International Workshop on Cyber Risk and Security during the Center of Research in Econo-finance and Actuarial sciences on Risk...Date Published: 09/12/2023
Read More
Cyber Risk Toolkit: Digital Assets and Their Current Roles Within Cybercrime
Digital assets and their roles in cybercrime continue to increase. This paper seeks to provide a baseline understanding of digital assets for insurance industry practitioners whose lines of business...
Topics: Cyber Risk
Date Published: 07/14/2023
Read More
Cyber Risk Toolkit: Digital Assets and Their Current Roles Within Cybercrime
The Committee on Cyber Risk released a new chapter in the Cyber Risk Toolkit, "Digital Assets and Their Current Roles Within Cybercrime." The paper seeks to provide a baseline understanding of...
Topics: Casualty Cyber Risk
Date Published: 07/14/2023
Read More
Cyber Risk Toolkit Updated With Revised Ransomware Section
The latest update to the Committee on Cyber Risk’s Cyber Risk Toolkit includes a revised section on ransomware. The toolkit, released originally in 2021, is updated regularly with the latest...
Topics: Cyber Risk
Date Published: 01/10/2023
Read More
Comment Letter to the Treasury Department and FIO on Potential Federal Insurance Response to Catastrophic Cyber Incidents
Committee on Cyber Risk comments to the U.S. Department of the Treasury and Federal Insurance Office (FIO) request for comment (RFC) on cyber insurance and catastrophic cyber incidents in order to...
Topics: Cyber Risk
Date Published: 12/14/2022
Read More
Cyber Risk Task Force Updates Cyber Risk Toolkit
The American Academy of Actuaries’ Cyber Risk Toolkit, developed by the Academy’s Cyber Risk Task Force, is comprised of a series of papers addressing issues pertinent to cyber risk insurance...
Topics: Cyber Risk
Date Published: 06/03/2022
Read More
Comment Letter to the Treasury Department and FIO on the Terrorism Risk Insurance Program
Cyber Risk Task Force comments to the U.S. Department of the Treasury and Federal Insurance Office (FIO) request for comment (RFC) on the effectiveness of the cyber considerations of the Terrorism...
Topics: Casualty Cyber Risk
Date Published: 05/16/2022
Read More
Updated Cyber Risk Tool Kit
The American Academy of Actuaries’ Cyber Risk Toolkit, developed by the Academy’s Cyber Risk Task Force, is comprised of a series of papers addressing issues pertinent to cyber risk insurance...
Topics: Cyber Risk Public Policy
Date Published: 02/24/2022
Read More
Cyber Risk Toolkit
The American Academy of Actuaries’ Cyber Risk Toolkit, developed by the Academy’s Cyber Risk Task Force, is comprised of a series of papers addressing issues pertinent to cyber risk insurance...
Topics: Cyber Risk Public Policy
Date Published: 08/25/2021
Read More
American Academy of Actuaries Report on Cyber Breach Reporting Requirements
The Academy’s Cyber Risk Task Force sent a letter offering its assistance in relation to the challenges and opportunities present in the current system of regulating and overseeing responses to...
Topics: Casualty Cyber Risk
Date Published: 02/22/2021
Read More
Task Force Comments on Cyber Risk and TRIA
The Academy's Cyber Risk Task Force responded to the U.S. Treasury Department's questions about the applicability of the Terrorism Risk Insurance Act (TRIA) to cyber-attacks that aim at targets...
Topics: Casualty Cyber Risk
Date Published: 01/07/2021
Read More
Cyber Breach Reporting Requirements: An Analysis of Laws Across the United States
States have moved to develop their own laws given there is a lack of federal regulation of notice requirements to consumers in the event of cyber breaches. The purpose of this paper is to provide a...
Topics: Cyber Risk NAIC
Date Published: 11/06/2020
Read More
Academy Comments to GAO on Cyber-Attacks and TRIA
The Academy's Cyber Risk Task Force commented to the Government Accountability Office on the question of how cyber-attacks may be addressed under the Terrorism Risk Insurance Act.
Topics: Casualty Cyber Risk
Date Published: 06/01/2020
Read More