Cyber insurance underwriting risk – Supervisory Statement SS4/17

This supervisory statement sets out the Prudential Regulation Authority’s (PRA) expectations of firms regarding cyber insurance underwriting risk.

The statement covers the PRA’s expectations in relation to three broad areas: 1. assessment and management of non-affirmative cyber risk, 2. clarity of cyber risk strategy and risk appetite and 3. cyber expertise.