Exploring Behavioural Strategies in Cyberinsurance Adoption

This study explores decision making around the purchase of cyberinsurance and the impact on cybersecurity behaviours. In an online experiment, involving 4,800 participants across four countries, we found that rational choice models fail to predict cybersecurity decisions. Specifically, individuals tend to opt for an overprotective cybersecurity strategy by ensuring higher protection levels and insurance coverage than expected utility theory would deem necessary. Two key implications are highlighted: Firstly, the need to focus on the human component of cybersecurity, and secondly, the need to develop behaviour-oriented interventions driven by theory and capable of accounting for the non-rational component of cybersecurity decision-making.

• Publication year

  2024

• Venue

  European Conference on Cognitive Ergonomics

• Publication date

  2024-10-08

• Fields of study

  Computer Science, Psychology

• Identifiers
  DOI 10.1145/3673805.3673816
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Human factor, a critical weak point in the information security of an organization's Internet of things

  2021cited by this paper
• Quantitative Issues in Cyberinsurance: Lessons From Behavioral Economics, Counterfactuals, and Causal Inference

  2020cited by this paper
• Security Risk Models for Cyber Insurance

  2020cited by this paper
• Using protection motivation theory in the design of nudges to improve online security behavior

  2019cited by this paper
• The effect of cyber-risk insurance to social welfare

  2017cited by this paper
• Moral Hazard in Natural Disaster Insurance Markets: Empirical Evidence from Germany and the United States

  2017cited by this paper
• What do we know about cyber risk and cyber risk insurance

  2016cited by this paper
• Cognitive Risk Framework for Cybersecurity: Bounded Rationality

  2016cited by this paper
• A framework for incorporating insurance in critical infrastructure cyber risk strategies

  2016influential reference
• Do the Better Insured Cause More Damage? Testing for Asymmetric Information in Car Insurance

  2015cited by this paper
• Decision support approaches for cyber security investment

  2015cited by this paper
• Measuring moral hazard using insurance panel data

  2015cited by this paper
• Adverse Selection and Moral Hazard in Natural Disaster Insurance Markets: Empirical evidence from Germany and the United States

  2014cited by this paper
• Global Risks Report

  2013cited by this paper
• Consumers' misunderstanding of health insurance.

  2013cited by this paper
• Health insurance coverage and take-up: lessons from behavioral economics.

  2012cited by this paper
• The Economics of Information Security Investment

  2011cited by this paper
• Equilibrium in Competitive Insurance Markets : An Essay on the Economics of Imperfect Information

  2007cited by this paper
• Cyberinsurance in IT Security Management

  2007cited by this paper
• Prospect Theory의 보편성

  2006cited by this paper
• Secrets and Lies

  2004cited by this paper
• Self-selection and moral hazard in Chilean health insurance.

  2003cited by this paper
• Heuristics and Biases: The Psychology of Intuitive Judgment

  2002cited by this paper
• The economics of information security investment

  2002cited by this paper
• Transforming the ‘Weakest Link’ — a Human/Computer Interaction Approach to Usable and Effective Security

  2001cited by this paper
• Advantageous Selection in Insurance Markets

  2001cited by this paper
• Testing for Asymmetric Information in Insurance Markets

  2000cited by this paper
• Advances in prospect theory: Cumulative representation of uncertainty

  1992cited by this paper
• Decision models: some lessons from the field

  1991cited by this paper

• No citing papers are available for this paper.