7 ms·

You might be right, unfortunately. If it's cheaper to buy insurance that will cover the (expected) losses caused by outages, most organizations will choose to d

You might be right, unfortunately. If it's cheaper to buy insurance that will cover the (expected) losses caused by outages, most organizations will choose to do that instead of making the software more failure-resistant. The problem is that insurance only works well for isolated incidents, but a software failure can cause a cascading failure with a huge impact. Insurance companies generally aren't prepared for that and don't have the resources to pay out to everyone.

sopooneo 11y ago
But aren't the insurance companies smart enough to figure this out and start correcting their rates to be much higher?And if they actually have their acts together, wouldn't those same insurance companies start insisting on basic audits of their client's systems? I actually don't know about this stuff, so any correction of my thoughts is appreciated.
- TeMPOraL 11y ago
  A cynic in me feels that someone will figure out the problems with cascade case and insure from failure of insurance companies to pay out insure money. Just like during 2008 financial crisis.
  - coderjames 11y ago
    That's what existing reinsurance companies do, if I understand correctly. They insure the insurance companies.
- pavel_lishin 11y ago
  > But aren't the insurance companies smart enough to figure this out and start correcting their rates to be much higher? That seems like a naive "MARKET WILL FIX IT" approach. More likely, if the market does fix it, it'll be by having insurance companies deploy actual inspectors who know what they are doing and what sorts of problems to work for. They might even be a fun combination of physical pentester/irl chaos monkey. Doesn't that sound like a fun job?
- pjc50 11y ago
  Quite often operational losses aren't insured against this kind of error, for example the Knight-Ridder automated trading losses. Sufficiently big operational failures can just destroy companies, especially small companies. System audits would have to be standardised. There's bits of this in ISO9001, PCI compliance, FIPS, and so on. But the technology changes rapidly and the insurance companies don't have the expertise.
toong 11y ago
Cascading failure will be covered in the expected loss, so insurance fees go up and up ?

sopooneo 11y ago

But aren't the insurance companies smart enough to figure this out and start correcting their rates to be much higher?And if they actually have their acts together, wouldn't those same insurance companies start insisting on basic audits of their client's systems? I actually don't know about this stuff, so any correction of my thoughts is appreciated.

TeMPOraL 11y ago
A cynic in me feels that someone will figure out the problems with cascade case and insure from failure of insurance companies to pay out insure money. Just like during 2008 financial crisis.
- coderjames 11y ago
  That's what existing reinsurance companies do, if I understand correctly. They insure the insurance companies.
pavel_lishin 11y ago
> But aren't the insurance companies smart enough to figure this out and start correcting their rates to be much higher? That seems like a naive "MARKET WILL FIX IT" approach. More likely, if the market does fix it, it'll be by having insurance companies deploy actual inspectors who know what they are doing and what sorts of problems to work for. They might even be a fun combination of physical pentester/irl chaos monkey. Doesn't that sound like a fun job?
pjc50 11y ago
Quite often operational losses aren't insured against this kind of error, for example the Knight-Ridder automated trading losses. Sufficiently big operational failures can just destroy companies, especially small companies. System audits would have to be standardised. There's bits of this in ISO9001, PCI compliance, FIPS, and so on. But the technology changes rapidly and the insurance companies don't have the expertise.

toong 11y ago

Cascading failure will be covered in the expected loss, so insurance fees go up and up ?