The Department of Homeland Security’s National Protection and Programs Directorate has been talking with the insurance industry about creating a cyber incident repository “to create a warehouse of cyberrisk actuarial information needed to grow the cybersecurity market.”
Although discussions are still in the early stages, DHS has been active in meeting with industry experts in 2015. DHS wants to expand the cyber insurance market “because it makes firms more proactive and protective and more resilient to attacks,” but “insurers and brokers say they do not have what they need to best underwrite risk, namely a historical record and information on severity and frequency.” Here is an extensive story on the possibility of a repository, including its benefits and its limitations.