CYBER RISK ASSESSMENT AND CYBER INSURANCE

Describe the steps to conduct a risk assessment to achieve the goals for information security (availability, integrity, confidentiality, accountability, and assurance). *3-full pages* *At LEAST 2 peer-reviewed references* What do cyber insurance policies cover and exclude (i.e., First Party vs. Third Party)? What factors might an insurance company consider in assessing the risk level (exposure) of a certain business (i.e., Organizational, Technical, Policies & Procedures, Legal & Compliance)? In your opinion, are cyber insurance policies a viable option for businesses to mitigate cyber risk? Explain. *3-full pages* *At LEAST 2 peer-reviewed references*