June 9, 2025
Cyber insurance needs better quantification
James Hanbury
Global Lead Director, Co-founder

Read the next blog in the series

No items found.
James Hanbury
Global Lead Director, Co-founder
James is the co-founder and Global Lead Director of CRI. He has spent over a decade working with cyber and risk teams, helping them bring more structure and clarity to how cyber risk is measured and communicated. James began building the earliest versions of CRI's models back in 2016, using Excel to explore how organisations could approach cyber risk in a more decision-focused way. That work has since grown into a SaaS-enabled capability now used by clients around the world. Based in London, James continues to work closely with CRI's clients and partners, focusing on how to make cyber risk quantification useful, explainable, and easier to adopt in practice.
Blog
Cyber insurance needs better quantification

Cyber insurance has become a staple in many organisations’ risk strategies, but its strategic value is often under-leveraged. For many firms, it remains disconnected from broader decisions about how to manage cyber risk. That’s a missed opportunity.

When used well, cyber insurance is more than a financial backstop. It can play a vital role in a rounded risk management strategy, helping organisations navigate uncertainty, reinforce resilience and align around a clear risk appetite. But to get there, we need to start with something many organisations still lack – a consistent way of quantifying cyber risk.

Read now on Intelligent Insurer.

Get your copy below.
By submitting this form I agree that Cyber Risk Insights may collect, process and retain my data pursuant to its Privacy Policy.
Thank you! Use the button below to read now.
Read now
Oops! Something went wrong while submitting the form.

Summary

Key messages

01

02

03

Blog
Cyber insurance needs better quantification

Cyber insurance has become a staple in many organisations’ risk strategies, but its strategic value is often under-leveraged. For many firms, it remains disconnected from broader decisions about how to manage cyber risk. That’s a missed opportunity.

When used well, cyber insurance is more than a financial backstop. It can play a vital role in a rounded risk management strategy, helping organisations navigate uncertainty, reinforce resilience and align around a clear risk appetite. But to get there, we need to start with something many organisations still lack – a consistent way of quantifying cyber risk.

Read now on Intelligent Insurer.

Read now

Summary

Key messages

01

02

03

Recent Insights

Building Cyber and Digital Resilience – The four questions every public sector leader must answer.

Earlier this year the National Audit Office (NAO) warned that Government cyber resilience isn’t keeping up with the evolving threat. Unsurprisingly, digital and cyber resilience across public sector is now under unprecedented scrutiny and the pressure to act has never been higher.
Francesca Vallely
Blog

Five Principles for Building Cyber Resilience

Many organisations say they want to be “cyber resilient”, but the term is often vague. At its core, resilience means ensuring the business can continue to operate despite inevitable events – cyber or otherwise. The problem is that resilience is still too often treated as an aspiration, rather than a discipline.
James Hanbury
Blog

Are your cyber metrics giving you a false sense of security?

Is your organisation primarily using a traffic light system (red, amber, green) to manage cyber risk? You could be overlooking a crucial dimension of risk management.
Elizabeth Huthman
Blog

See CRI in action

Book a personalised demo and discover how CRI can help you make smarter cyber risk decisions.
Book a demo