|
|
|
|
Verisk Cyber Exposure Data Standard and Preparer's Guide |
Over the past year, cyber risk has become the fastest-growing peril. To accurately assess and manage their cyber risk―which includes data breaches, computer viruses, cyber attacks, and digital extortion demands―organizations need a detailed understanding of their cyber exposure.
In anticipation of the release of a comprehensive cyber risk model from AIR, it is imperative that organizations begin capturing the data needed for modeling the risk now. To assist in this effort, and subsequent to the release of a cyber exposure data standard by Verisk Analytics®, AIR has developed the industry’s first global cyber exposure data standard and preparer’s guide to enable the seamless exchange of data and facilitate risk transfer across the insurance value chain.
Click here to download an empty Cyber Exposure SQL database and start entering your data.
Click here to download a PDF version of this guide.
The following informational tables describe the fields, validation rules, default values, and data types that help organizations document cyber exposure data now and model cyber risk in the future. The Common Core column in each table indicates fields agreed upon by both Verisk and Cambridge/RMS to be included in the standard. Many of the fields are optional, providing flexibility for different types of information and levels of detail. The comprehensive design based on industry feedback allows for robust data capture in an SQL schema. The only mandatory elements are the insured’s industry and revenue data.
A brief description of each table follows. Click a specific table name to view the complete table. For your convenience, the tables are sortable by column.
| Data Standard Category | Brief Description | Mandatory? |
Organization Data |
||
The Organization table includes basic information like industry, revenue, recovery plans, and other organization-wide items that you might already have. |
Mandatory |
|
The Info by Country table allows several data fields to be collected for separate countries. |
Optional |
|
The Data table describes information that you can provide for multiple types of data per organization. |
Optional |
|
The Asset table categorizes assets like data, computers, and other physical assets (e.g., heating controls), as well as asset attributes like physical location and recovery costs. |
Optional |
|
The Asset Organization Data Xref table creates a many-to-many association between organization data and assets. |
Optional |
|
The Transfer table captures how associated storage and transfer mechanisms might be at risk. |
Optional |
|
The Transfer Organization Data Xref table creates a many-to-many association between organization data and a transfer. |
Optional |
|
Insurance Data |
||
The Exposure Set table captures the organization's exposure data. |
Optional |
|
The Contract table stores record for primary insurance policies. |
Mandatory |
|
The Layer table captures primary contract layer information. |
Optional |
|
The Layer Condition table contains layer conditions such as sublimit and policy restrictions. |
Optional |
|
The Transfer Organization Data Xref table creates an association between the organization and layer condition. |
Optional |
|
Reinsurance Data |
||
The Program table captures information regarding the collection of reinsurance contracts |
Optional |
|
The Reins Applies to Geo table stores information regarding the geographic/area filter applied for the reinsurance treaty. |
Optional |
|
The Reinsurance table contains fields for insurance policy conditions. |
Optional |
|
The Reins Applies to Exp table contains information about Facultative certificates and Surplus Share treaties that are applied to exposures such as location, contract, and layer. |
Optional |
|
Reference |
||
Some tabs include fields that ask for a scaled rating. For these fields, use the Quality Score Rubric for guidance. |
Optional |
|
The ISO Country Codes reference topic lists all supported country codes. |
Optional |
|
The Currency Codes reference topic lists all supported currency codes. |
Optional |
|
The Exchange rates topic provides exchange rates for supported currencies. |
Optional |
|
AIR Worldwide (AIR) is the scientific leader and most respected provider of risk modeling software and consulting services. AIR founded the catastrophe modeling industry in 1987 and today models the risk from natural catastrophes and terrorism in more than 90 countries. More than 400 insurance, reinsurance, financial, corporate, and government clients rely on AIR software and services for catastrophe risk management, insurance-linked securities, detailed site-specific wind and seismic engineering analyses, and agricultural risk management. AIR Worldwide, a Verisk Analytics (Nasdaq:VRSK) business, is headquartered in Boston with additional offices in North America, Europe, and Asia. For more information, please visit www.air-worldwide.com.
|
© 2016 AIR Worldwide. All rights reserved. |
