Building Resilience in Cybersecurity -- An Artificial Lab Approach

"Using the lab, in numerical case studies, we identify two classes of measures to control systemic cyber risks: security- and topology‑based interventions. We discuss the implications of our findings on selected real‑world cybersecurity measures currently applied in the insurance and regulation practice or under discussion for future cyber risk control. To this end, we provide a brief overview of the current cybersecurity regulation and emphasize the role of insurance companies as private regulators."