Mind the Gap: Securely modeling cyber risk based on security deviations from a peer group

There are two strategic and longstanding questions about cyber risk that organizations largely have been unable to answer: What is an organization's estimated risk exposure and how does its security compare with peers? Answering both requires industry-wide data on security posture, incidents, and losses that, until recently, have been too sensitive for organizations to share. Now, privacy enhancing technologies (PETs) such as cryptographic computing can enable the secure computation of aggregate cyber risk metrics from a peer group of organizations …

cs.cr cyber cyber risk data econ.gn exposure gap incidents industry losses mind the gap modeling organization organizations posture q-fin.ec questions risk risk exposure security security posture stat.ap strategic what is