Automation of standardized cyber insurance processes

The study aims to develop a cyber insurance model that includes the main requirements of international regulatory documents and provides for the automation of individual processes of cyber insurance.The objectives of the study are to analyze existing standards, business processes of insurance of operational risks in cyberspace, means of automating insurance processes, forming a profile of cyber risks in the national cybersecurity system, critical information infrastructure, studying cyber insurance algorithms for their further automation, and substantiating the use of individual automation tools in practical activities.The work contains a review of existing standards and processes of insurance of operational risks in cyberspace (cyber insurance) and an analysis of cyber insurance processes using information technologies. The state of the regulatory framework of cyber insurance in Ukraine is briefly analyzed. The cyber insurance processes provided for by the International Standard ISO / IEC 27102 Information Security Management – Guidelines for Cyber Insurance are studied in detail. Separate means of automating cyber insurance processes are also considered, and approaches to optimizing their use within the framework of a risk-based approach to the profile of risks in cyberspace (cyber risks) are proposed.Analysis of cyber insurance and other preventive methods of reducing risks and the negative impact of threats in cyberspace indicates an unsatisfactory state of using such instruments in critical information infrastructure.The work substantiates and proposes a systemized set of cyber insurance processes for effective automation of these processes and further practical application in the design tasks of relevant automated (information and communication) systems.The results obtained can be used in cyber insurance scenarios and algorithms.