Insurance Policies are potentially effective tools to transfer some of the Enterprise Risks to a willing third party. There can be many risk areas within a company, and they are often completely different in nature. The level of exposure for any organization is also specific to not just the risk landscape, but also the organization's protective capabilities. An Insurance Coverage may focus on a specific Threat area, a specific part of the Organization, a specific Risk Event, or even a specific Attack Surface that can be targeted. Any combinations of any of these dimensions is possible.
Also, another critical coverage question is the specific Impact that is covered by an Insurance Policy. Management teams may want to capture some Strategic Impacts from Risk Events that can be significant for the organization, given its strategy, competitive advantages, or business model. However, Insurance Policies most likely cover only Direct Financial Impacts that are relatively simple to quantify in case of a Risk Event.
Given the above, an effective Insurance Evaluation capability needs to enable decision makers to define the scope of a specific Insurance Policy across all the above dimensions. And it is exactly what is possible with the ManageXValue Risk Quantification platform.
This video provides an overview of the Insurance Policy setup process illustrating its flexibility and precision at the same time. As the Insurance Evaluation feature sits on top of the Risk Quantification Graph Model, it performs the evaluation easily. Not just for the Current Risk, but also considering the impact of any Risk Mitigation Investments or Investment Portfolio.