Model cyber risk with greater clarity

Cyber risk has become one of the most dynamic and difficult exposures for the insurance market to understand, price, and manage. Ransomware, data breaches, cloud outages, technology failures, and other cyber events can create both frequent attritional losses and severe systemic loss scenarios across connected portfolios.

Moody’s RMS™ Cyber Solutions give insurers, reinsurers, brokers, and risk managers a structured view of cyber risk across accounts, portfolios, and catastrophe scenarios. Our cyber risk models help organizations quantify exposure, assess accumulation, evaluate tail risk, and make more informed decisions about underwriting, pricing, portfolio strategy, reinsurance, and risk transfer. 


cyber image of homes


How we help

Understand threat actors

Assess threat-actor profiles, motivations, capabilities, resources, and methods of operation to understand where cyber risk may originate.

Model cyber event pathways

Analyze attack vectors and loss mechanisms to understand how cyber events may spread and create losses across a portfolio.

Map technology dependencies

Identify reliance on software, cloud services, digital infrastructure, and other shared providers that may create cyber accumulation risk.

Assess business vulnerability

Evaluate technical and human factors that may influence an organization’s susceptibility to specific cyber events.

Quantify assets at risk

Connect cyber events to revenue-dependent digital processes, data, financial assets, and other exposed values.

Estimate insured losses

Apply policy terms, limits, deductibles, and coverage structures to estimate potential insurance losses.

Cyber insurance awards europe 2026
Chartis RiskTech100 2026 award
Chartis RiskTech100 2026 Moody's Insurance award
Insurance ERM Americas Awards 2025 Winner Catastrophe risk
Chartis Quantitative Analytics 50 2025 #1
Insurance ERM Americas Awards 2025 Winner Stress scenarious
Chartis RiskTech AI50 2025 - Moody's AI-Driven Property Risk Analytics
Insurance ERM CRSA Awards 2025 winner UK & Europe  Economic scenario
Chartis RiskTech AI50 2025 - Moody's AI-Driven Insurance Risk Analytics
Insurance ERM CRSA Awards 2025 winner Americas Economic scenario
Insurance ERM CRSA Awards 2025 winner UK & Europe Catastrophe risk
Insurance ERM CRSA Awards 2025 winner UK & Europe IFRS 17

Explore Moody’s RMS Cyber Solutions


Who we help 

Portfolio managers use Moody’s RMS Cyber Solutions to understand how cyber risk accumulates across portfolios and where diversification may be limited by shared dependencies and correlated exposures. ​

Key applications include: ​

  • Evaluating cyber exposure across multiple aggregation levels, including account, portfolio, and treaty ​
  • Identifying concentrations driven by common technology providers, software dependencies, industries, or event types ​
  • Comparing diversification across regions, sectors, and lines of business ​
  • Supporting portfolio steering decisions as cyber books grow, evolve, or rebalance ​
  • Stress testing portfolios against severe but plausible cyber scenarios to understand potential loss patterns ​


These insights help portfolio managers balance growth objectives with a clearer view of accumulation and downside risk.


Underwriters use Moody’s RMS Cyber Solutions to support more consistent and informed cyber risk evaluation at the account level, while maintaining alignment with portfolio objectives. ​

Key applications include: ​

  • Understanding key cyber event drivers across IT, cloud, and cyber‑physical scenarios ​
  • Evaluating expected loss and tail risk for individual accounts and segments ​
  • Using outputs such as year loss tables, year event loss tables, and exceedance probability curves to support pricing discussions ​
  • Comparing relative risk across submissions using a consistent analytical framework ​
  • Supporting underwriting decisions with a clearer view of how individual risks may contribute to portfolio exposure ​


These capabilities help underwriting teams apply greater discipline and consistency in a rapidly evolving cyber insurance market.


Risk managers use Moody’s RMS Cyber Solutions to understand how cyber events could affect capital, solvency, and risk transfer strategies under a range of loss scenarios. ​

Key applications include: ​

  • Identifying portfolio‑level accumulation and aggregation points driven by shared infrastructure and technology dependencies ​
  • Evaluating potential losses under extreme but plausible cyber events ​
  • Supporting capital allocation decisions with a clearer view of cyber tail risk ​
  • Informing reinsurance structure, attachment points, and purchasing decisions ​
  • Assessing how changes in portfolio composition may alter overall cyber exposure ​


These insights help risk managers connect cyber risk modeling to capital management, reinsurance, and broader risk governance objectives.



Case studies

Technology, Data, Connection, Internet, Digitally Generated Image
Evolution of the cyber market: A Liberty Mutual story

Join Patrick Thielen, Global Head of Cyber Insurance at Liberty Mutual, and Damini Mago, Associate Director, Product-Cyber at Moody’s, as they discuss the evolving cyber insurance market. They discuss the cyber market’s stabilization, rising cyber risks, the growing focus on underwriting, and the shift toward data-driven decision-making.

Watch now
Abstract representation of dynamic digital data streams in vibrant blue and purple hues, capturing artificial intelligence concepts with intricate patterns and complex technological networks
Models as a framework to understand cyber risk: A Gallagher Re story

In this testimonial, Justyna Pikinska and Matthew Harrison from Gallagher Re reflect on advancements in the cyber modeling market over the past decade. They address misconceptions about model credibility and highlight milestones, like the placement of cyber ILS cat bonds in 2023. Learn more about the evolution of cyber risk modeling.

Watch now
Blockchain, Network Server, Technology, Bitcoin, Biometrics
Pioneering the Cyber Cat bond marketing: A Beazley story

Join Alice Woolley, Associate Director, Advisory Services, Insurance Solutions, Moody’s, and Richard Gray, Head of Third-Party Capital at Beazley, in a conversation on the transformative role of capital markets in cyber insurance with Richard Gray, who shares lessons from pioneering cyber ILS transactions.

Watch now
Bright glowing neon background. Abstract neon lights Sci-Fi futuristic Hi Tech virtual reality tunnel. Futuristic motion graphic. Ultra violet neon light glow. 3D illustration
Innovations in cyber risk modeling: An Aon story

Crystal Boch, Senior Director of U.S. Cyber Analytics at Aon, highlights the evolution of cyber models in the insurance industry and demonstrates how Moody’s is pushing the boundaries of risk management with advanced data insights. With a shocking 80 percent of economic losses from cyber events still uninsured, she underscores the urgent need for innovation and growth in the market.

Watch now

Cyber Industry Steering Group

Moody’s works with leading (re)insurers, brokers, and technology partners through the Cyber Industry Steering Group to support the growth of the global cyber insurance market. The initiative focuses on improving understanding of cyber risk, strengthening modeling and analytics, and supporting more consistent risk quantification across the industry. The group conducts primary research, develops new approaches to cyber risk assessment, and leads market education initiatives designed to attract capacity and support market development.


Close up of network data flowing on black background.

Cyber news and views

blog
Moody’s and Bitsight Partner on Cyber Insurance
To capitalize on cyber insurance, (re)insurers face data transparency and model issues. Moody’s RMS and Bitsight aim to build confidence with unified solutions, focusing on comprehensive risk management from underwriting to remediation.
Close up of electric vehicle battery cells on efficient mass production assembly line
blog
What recent cyber incidents really taught us about cyber catastrophe risk
How can cyber insurance-linked securities (ILS) providers and insurers distinguish between cyber events that are more ‘normal’ and those genuinely systemic cat events that the insurance industry should worry about? Alex Mican examines where specific events lie in terms of tail-risk potential, and how most events fall into the ‘attritional’ zone, but stresses the fact that true tail-risk events remain (very much) plausible, underlining the need for a continual, robust scenario analysis framework that helps focus on financial impact rather than media attention.
cyber
case study
Moody's Ali Afsar: More cyber cat bond transactions and increased maturity reducing cyber modelling scepticism

The increasing amount of cyber catastrophe bond transactions and growing maturity of the cyber peril means scepticism around cyber modelling is reducing, Ali Afsar, director, product manager for cyber solutions at Moody's Analytics has said.

cyber
linkedin
Congratulations to Moody's Corporation, named Cyber Insurance Risk-Modelling Technology Provider of the Year.

Judges Comment: Moody’s Cyber Risk Model quantifies cyber catastrophe and systemic risk to aid insurers with underwriting, providing a richer, layered view of portfolio exposure through coverage, placement, and portfolio management workflows.

cyber
article
Understanding insured losses from the October AWS cloud outage

The Amazon Web Services (AWS) cloud outage at its US-East-1 region, which emerged in the early hours Eastern Time (ET) on Monday, October 20, had widespread and sudden consequences for companies and organizations increasingly reliant on their cloud services.

cyber
data story
Weak Artificial Intelligence governance poses growing risk of data breaches

Moody’s 2025 Cyber Survey shows companies face rising dangers as AI tools become embedded in business operations.

cyber
article
Key cyber insurance takeaways from Asia-Pacific: Addressing unique challenges with innovative models

The cyber insurance landscape in the Asia-Pacific (APAC) region is transforming. With less than 10% of global cyber insurance gross written premiums (GWP) currently, but with a growing digital economy and increasing reliance on technology, insurers see significant growth potential in the region.

cyber
article
Moody’s RMS Cyber Solutions version 9.0: A major leap in cyber risk modeling powered by Bitsight

As cyber risk continues to escalate in scale and complexity, to help the growing cyber insurance market understand the risk in its broadest sense, Moody’s is proud to announce a major milestone in our cyber modeling capabilities with the upcoming release of Moody’s RMS Cyber Solutions Version 9.0.

cyber
case study
Fortifying risk management with advanced cybersecurity analytics: A Moody’s and Bitsight partnership

As organizations grow and their interactions with third-party entities intensify, they expose themselves to a broader spectrum of cyber threats. This coupled with digital transformation has brought cyber risk to the forefront. Cyber threats are not just IT challenges; they can inflict substantial damage across financial, technical, reputational, and operational facets of a business. Recognizing and mitigating the spectrum of cyber risks is crucial, and it's essential for you to gain visibility into your organization’s cyber risk exposure across the broader business ecosystem.

cyber
article
An analytics-led approach to cyber intelligence

Gallagher Re uses Moody’s RMS™ models to improve cyber risk assessment, focusing on ransomware and cloud downtime. Its analytics-led approach aims to attract new capital and support market growth, offering robust cyber re/insurance solutions.

cyber
article
Exploring cyber accumulation risk: Leveraging Moody’s event catalog to navigate RDS scenarios

The evolving cyber landscape necessitates a deep understanding of cyber accumulation risk. Beazley, Munich Re, and Gallagher Re's whitepaper, leveraging the MITRE ATT&CK framework, offers insights into managing risk from extreme malware events. 

cyber
article
Cyber insurance: Moody’s RMS Version 8 offers increased maturity for risk analysis

Cyber insurance risks surged amid the Covid-19 pandemic, with premium hikes followed by stabilization due to better cybersecurity. Although cyber threats continue to challenge insurers, Moody’s Cyber Solutions Version 8 aids in risk modeling.

cyber
case study
First cyber cat bonds a watershed moment: Moody’s video interview

The successful issuance of the first full cyber catastrophe bonds in late 2023 was a watershed moment and the role of risk models in helping insurance-linked securities investors get up to speed on what is still a relatively new peril to the ILS sector was key, executives at Moody’s RMS told us in an Artemis Live video interview.

modeling
article
Moody's provides modeling support to Beazley's $140 million cyber catastrophe bond

The bond is specifically crafted to provide coverage for catastrophic and systemic cybercrime events with a low probability of occurrence.

cyber risk
press release
Moody’s launches Cyber Industry Steering Group to facilitate growth potential of the global cyber insurance market

Munich Re, Gallagher Re, and Bitsight join as founding members of the Cyber Industry Steering Group.

cyber
press release
Moody’s and BitSight partner to create integrated cybersecurity risk platform

Moody’s Corporation (NYSE:MCO) and BitSight today announced a significant investment by Moody’s, further enhancing BitSight’s offerings and capabilities, to create a comprehensive, integrated, industry-leading cybersecurity risk platform. This transaction reflects the increasing strategic, financial, and operational impact of cyber risk to organizations and markets.

cyber
blog
Cyber and the war exclusion

Cuthbert Heath's insurance innovations adapted from World War I to modern cyberattacks like NotPetya. Legal debates over the definition of “war” affect coverage, emphasizing the challenge of insuring state-sponsored cyber risks.

cyber
blog
Implications of the WannaCry cyber-attack for insurance

The WannaCry cyberattack spread malware globally, affecting 300,000 machines in 150 countries. RMS monitors such risks and updates on impacts, highlighting the systemic nature of cyber threats and the importance of cybersecurity measures.


Why Moody's?

Over 150 insights per day

Over 150 insights per day

More than 50 data sources

More than 50 data sources

Over 200,000 articles

Over 200,000 articles

Covering more than 128 countries

Covering more than 128 countries

Including insights on over 900 threat actors

Including insights on over 900 threat actors

Millions of cyber incidents (including DDoS)

Millions of cyber incidents (including DDoS)


GET IN TOUCH

Speak to our team

Interested in learning more about our cyber solutions? Our experts are ready to help.