3 ms·
It's a great idea, iff you can accurately price security risks. Security is an org problem as much as a tech problem. Trying to estimate likely security risks
by curiousllama 6y ago
It's a great idea, iff you can accurately price security risks.
Security is an org problem as much as a tech problem. Trying to estimate likely security risks caused by orgs is... complicated. You would blow your margin in assessment costs alone.
Besides, can you imagine a board asking the CEO why they're buying insurance with the infosec budget instead of, y'know, ensuring infosec?
- DevX101 6y agoInsurance puts skin in the game for the insurance/security company. If a security company audits my system and gives the greenlight, they should be willing to put money on the line to defend their work.