6533b7d6fe1ef96bd1266f9a

RESEARCH PRODUCT

Developing and Validating a Behavioural Model of Cyberinsurance Adoption

Pamela BriggsYolanda GomezLynne CoventryDawn Branley-bellJosé Vila

subject

cybersecurityMoral hazardtheory of planned behaviourGeography Planning and Development0211 other engineering and technologiesPsychological interventionTJ807-83002 engineering and technologyManagement Monitoring Policy and LawTD194-195Structural equation modelingRenewable energy sourcesTask (project management)SAFER0502 economics and businessRisk propensityGE1-350050207 economics021110 strategic defence & security studiesActuarial scienceEnvironmental effects of industries and plantsRenewable Energy Sustainability and the Environmentcyberinsuranceprotection motivation theory05 social sciencesTheory of planned behaviorG900C800Environmental sciencesProtection motivation theoryPsychology

description

Business disruption from cyberattacks is a growing concern, yet cyberinsurance uptake remains low. Using an online behavioural economics experiment with 4800 participants across four EU countries, this study tests a predictive model of cyberinsurance adoption, incorporating elements of Protection Motivation Theory (PMT) and the Theory of Planned Behaviour (TPB) as well as factors in relation to risk propensity and price. During the experiment, participants were given the opportunity to purchase different cybersecurity measures and cyberinsurance products before performing an online task. Participants likelihood of suffering a cyberattack was dependent upon their adoption of cybersecurity measures and their behaviour during the online task. The consequences of any attack were dependent upon the participants insurance decisions. Structural equation modelling was applied and the model was further developed to include elements of the wider security ecosystem. The final model shows that all TPB factors, and response efficacy from the PMT, positively predicted adoption of premium cyberinsurance. Interestingly, adoption of cybersecurity measures was associated with safer behaviour online, contrary to concerns of “moral hazard”. The findings highlight the need to consider the larger cybersecurity ecosystem when designing interventions to increase adoption of cyberinsurance and/or promote more secure online behaviour.

10.3390/su13179528https://www.mdpi.com/2071-1050/13/17/9528