Report

Three Degrees of Separation: Understanding Cyber Tail Risk with Counterfactual Analysis

A 100-year event might only be a few degrees of separation from an event in recent memory. This counterfactual analysis was conducted to better understand potential cyber catastrophes and subsequent cyber tail scenarios. We look specifically at the past events SolarWinds and WannaCry to gain insights into how these could have had a larger fallout than they did. 

three degrees of separation counterfactual report no border-1

Report features

  • In this study, we look at two notable past events that were ultimately inconsequential in terms of claims paid: SolarWinds and WannaCry.
  • These events allowed us to see two different ways that malware could propagate widely, looking at the important factors that shaped how it unfolded, and how it could have played out differently.