Cybersecurity Governance and Security Measures 367
arial sciences. Premiums are calculated on a case-by-case basis, as a function
of multiple factors, and they are often expensive and characterised by numer-
ous restrictions. Unfortunately, insurance companies generally do not take into
account whether effective security measures are employed by enterprises.
Generally, insurance companies insure for hardware damages and data
loss. This is based on the value (when new) of all the equipment affected
that is mentioned in the policy and on the costs related to the continuity of
operations after a disaster. Since it is difcult to estimate the nancial value of
information and the related nancial consequences of its loss, insurance poli-
cies only ...