An Insider's Guide to Cyber-Insurance and Security Guarantees

Explore the evolving landscape of cyber-insurance and security guarantees in this 51-minute Black Hat conference talk by Jeremiah Grossman. Delve into the $75 billion security industry and its challenges, examining why businesses are increasingly turning to cyber-insurance as an alternative to breach prevention. Discover how the rise of cyber-insurance is influencing the information security industry and creating new opportunities for security vendors to align their incentives with customers through security guarantees. Learn about the taboo surrounding security guarantees, why they are becoming more common, and how they can differentiate security vendors in the market. Gain insights into the complexities of launching a security guarantee program, including business model design, product efficacy measurement, risk calculation, legal considerations, and financial accounting implications. Whether you're an InfoSec practitioner looking to get ahead in cyber-insurance and security guarantees, a security vendor interested in creating your own program, or a business manager seeking to understand the landscape, this talk provides valuable tools, processes, and information to navigate this emerging trend in the cybersecurity industry.