Seguros informáticos

• Autor(a) principal: Ferreira, Carolina Rocha
• Data de Publicação: 2019
• Tipo de documento: Dissertação
• Idioma: por
• Título da fonte: Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
• Texto Completo: http://hdl.handle.net/10362/66761
• topic: seguros informáticos; segurança; cibercrime; risco informático; apólice; empresas; seguradoras; cyber-insurance; security; cybercrime; cyber-risk; policy; enterprises; insurance companies; Direito

Cybercrime and informatic risk have become more and more frequent threats, targeting small and medium-sized enterprises, among others. From a perspective of risk prevention, risk transfer and security, this phenomenon is associated with the insurance market, as cyber-insurance will increase exponentially, as a result of the demand and need for greater protection. In this sense, the present dissertation aims to provide a risk analysis framework to be included in the initial evaluation for the design of a cyber insurance. To that end, we analyzed the evolutions and investigations that already exist in this area, highlighting analysis variables on cyber risk, and applying vulnerability / tolerance metrics on their respective operational dimensions. At the same time, we cross the legal aspects and more recent diplomas, such as the GDPR and the Security in Cyberspace Law, with the object study. During the development of this project, it will be verified that the framework created will not only function as an auxiliary tool to understand the risk profile and the most vulnerable points of a company, but also to respond to the phenomenon, from the conception and choice of a policy, until the final approval of the insurer and conclusion of a cyber insurance contract. It is also intended to explain how this structure is incorporated in the perspective of the company and the insurer, producing workflows of procedures and adapting questionnaires for this type of insurance. It is important that this type of information is always included in an application for cyber insurance, in the assessment, calculation and analysis of the risk, disclosing the pertinence of such conduct in order to avoid misfortunes that are so frequent in the insurance industry, when checking claims and technical expertise occur. It can be exploited by teams of experts and evaluators / auditors, by mediation bodies, insurance brokers and even security and / or consulting departments.