For U.S. critical infrastructure businesses, such as utilities, telecommunications and water suppliers, the threat of cyberattack is a growing and persistent concern. According to the Ponemon Institute, cyberespionage attacks have risen 38% since 2010. For cyberinsurance providers seeking to accurately assess risk for U.S. critical assets, it is becoming increasingly clear that a comprehensive, holistic approach is required.  

Impact of market forces on risk
Critical infrastructure companies fulfill an important role in facilitating business. Unlike the private industry, these firms are both physically and virtually exposed by the very nature of the services they provide. As market forces evolve, so too does the risk of exposure for these companies.

Operating distributed and complex infrastructures requires energy companies to pursue long-term, cost and technology-efficient investments in equipment. Those investments in efficiency, both legacy and current, have created more dynamic vulnerabilities that closely match the security trends of traditional IT networks. With the range of risks increasing, from disgruntled employees to hacktivists, and the public policy pressures growing, energy companies must seek an improved method of addressing these exposures while reducing and transferring risk appropriately.