In our increasingly networked world, information relating to an individual is of interest for its commercial value and for its potential to help promote a safe electronic realm, among other things. In the area of commerce, there are markets demanding the collection of personal data, and at the...

To avert the impending global Cyber-Finance Insurance Crisis based upon large-scale commercial reliance upon quantitative models with inherent model risks, tail risks, and systemic risks in current form, this post-doctoral thesis makes the following key contributions: Develops the first known...

This paper looks at cybersecurity and the protection of critical national infrastructure, as an area of systemic risk to society. In particular, it looks at the obligations and potential penalties which apply to cloud providers under the regulatory framework established by the EU’s Network and...

Background IoT and smart devices have become extremely popular in the last few years. With their capabilities to collect data, it is reasonable to have concerns about the protection of users' personal information and privacy in general. Objectives Comparing existing regulations on data...

IoT technology required to build smart homes, regarding automation and control processes, represents a significant information security and personal data protection challenge. Smart homes demand a new level of security requirements as they contain relevant, vulnerable and private information....

Specialty literature and solutions in the market have been focusing in the last decade on collecting and aggregating significant amounts of data about transactions (and user behavior) and on refining the algorithms used to identify fraud. At the same time, legislation in the European Union has...

Individuals derive benefits from their connections, but these may, at the same time, transmit external threats. Individuals therefore invest in security to protect themselves. However, the incentives to invest in security depend on their network exposures. We study the problem of designing a...

We examine a potential path to value-creation by cybersecurity investments: a reduction in a firm's cost of capital. Building on the existing literature on corporate finance, we suggest that given the business-ending threats of cybersecurity incidents and the importance of cybersecurity...

We use a unique cross-country dataset at the loss event level to document the evolution and characteristics of banks' operational risk. After a spike following the great financial crisis, operational losses have declined in recent years. The spike is largely accounted for by losses due to...