Methodological basis of cyberinsurance risk assessment

• Datum: 2026
• Hauptverfasser: Khudyntsev, Mykola, Khomenko, Oleksii, Klymenkov, Oleg
• Format: Artikel
• Sprache: Ukrainisch
• Veröffentlicht: Kyiv National University of Construction and Architecture 2026
• Schlagworte: cyber insurance; information security; cyber risks; information security risks; cyber risks and cyber insurance maturity model
• Online Zugang: https://es-journal.in.ua/article/view/365048
• Назва журналу: Environmental safety and natural resources

The main objective of the study is to formulate methodological foundations for assessing cyber insurance risks. The work defines the main terms related to cyber insurance, systematizes and analyzes cyber insurance risks, presents objects (processes) that will be subject to automation in the future, and cyber insurance algorithms. The objectives of the study are to determine the foundations of the methodology for assessing cyber insurance risks and cyber insurance within the framework of the proposed cyber insurance model, which considers the basic maturity levels of the main categories of participants in the insurance market of Ukraine and can be used in practical business activities.The methodological framework includes a description of the procedure for assessing cyber insurance (cyber insurance maturity), which complies with the provisions of the International Standard ISO/IEC 27102:2019(E) Information Security Management – Guidelines for Cyber Insurance and the Regulations on the Organization of Measures to Ensure Information Security and Cyber Protection by Financial Service Providers, approved by the Resolution of the Board of the National Bank of Ukraine dated 09.12.2025 No. 143. The basis of the procedure is the assessment of the development and implementation of cyber risk management processes and information security risks, as well as measures to ensure information security and cyber protection, considering the peculiarities of the functioning of the information and communication systems of the financial service provider within the framework of a risk-based approach.The paper proposes a hybrid model for assessing information security risks, cyber risks and cyber insurance maturity (RA&CIMM), criteria for determining risks and the level of IT maturity of the cyber insurance model, as well as the domain structure of the cyber insurance index (cyber insurance maturity).The results obtained can be used for planning and implementing cyber insurance by financial service providers (insurance market participants), as well as for comparative analysis with other approaches and insurance models, as well as the domain structure of the cyber insurance index (cyber insurance maturity).