{"id":7853,"date":"2023-12-07T12:18:32","date_gmt":"2023-12-07T18:18:32","guid":{"rendered":"https:\/\/www.bbrown.com\/insight\/a-case-study-using-advanced-stochastic-modeling\/"},"modified":"2023-12-07T12:18:32","modified_gmt":"2023-12-07T18:18:32","slug":"a-case-study-using-advanced-stochastic-modeling","status":"publish","type":"insight","link":"https:\/\/www.bbrown.com\/ca\/insight\/a-case-study-using-advanced-stochastic-modeling\/","title":{"rendered":"A Case Study Using Advanced Stochastic Modeling"},"content":{"rendered":"

[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column]\n\t

\n\n\t\t
\n\t\t\t
<\/div>\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t
\n\t\t\t
\n\t\t\t\t
\n\n\t\t\t\t\t\n
\n

Property & Casualty<\/p>\n

\n A Case Study Using Advanced Stochastic Modeling\n <\/h1>\n\t\n <\/div>\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\t<\/div>\n\n\t\n[\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″]\n
\n \n

\n A Case Study Using Advanced Stochastic Modeling\n <\/h1>\n\t\n <\/div>[vc_column_text]<\/p>\n

Introduction<\/h3>\n

In our first white paper, The Need for Efficient Risk Financing Strategies, we discussed the value that can be unlocked when firms view risks holistically and optimize their total cost of risk. Producing a portfolio view of risk requires one to first quantify risks on an individual basis. The best tools for such an analysis, as we reviewed, are stochastic risk models. We turn now to ground these concepts in a practical context. For the remainder of this series, we will walk through a case study involving a fictional company to show the risk quantification and subsequent analysis of selecting an optimal risk financing program.<\/p>\n

As discussed in the prior white paper, to produce a portfolio view of risk requires not just quantifying risks individually but also understanding how they interact, an exercise that may reveal causal relationships between risks or unexpected correlations that are significant in risk quantification.<\/p>\n

Cyber risk and directors & officers (D&O) liability are two lines whose interactions should be carefully analyzed. In recent years, extreme cyber losses, such as a large-scale data breach or an extended shutdown of operations, have led to shareholders filing securities class action lawsuits against several publicly traded U.S. firms. The typical allegations include the company\u2019s\u00a0misrepresentation of cybersecurity posture or withholding material information from a cyber incident. Going forward, the dependencies between D&O and cyber are expected to become even further intwined. In July 2023, the SEC adopted new rules requiring timely disclosures on material cyber incidents and annual disclosures regarding cybersecurity risk management plans, including the role and oversight of key managers and the board of directors.<\/p>\n

In part to address this new risk landscape, Brown & Brown has recently released two new stochastic modeling frameworks, Cyber In-Site\u2122 and D&O In-Site\u2122. Both leverage heavily researched quantification methodologies to help companies assess their cyber and D&O risk profiles and evaluate risk financing strategies. Our case study will include an in-depth analysis of these two risks for illustrative purposes. Each presents its own challenges, underscoring the necessity for robust modeling approaches.<\/p>\n

Case Study: Company XYZ \u2013 Quantifying Portfolio Risk<\/h3>\n

For our case study, we will focus on a simplified setting involving a fictitious company, Company XYZ. XYZ has approached Brown & Brown with the aim of better understanding its cyber and D&O risk profiles, whether its existing insurance program leaves the firm with a level of retained exposure within its corporate risk appetite and what alternative risk financing options are available to help optimize its total cost of risk considering all hazard risks. Historically, it has selected its insurance programs based exclusively on peer benchmarks for limits and retentions.<\/p>\n

Before reviewing any risk financing options, we will first quantify XYZ\u2019s risk profile for cyber and D&O separately and address any line-specific concerns. To quantify each risk, we utilize Brown & Brown\u2019s corresponding stochastic modeling frameworks. Each considers various aspects of XYZ\u2019s risk profile, runs an extensive Monte Carlo simulation and outputs probability distributions of potential losses.<\/p>\n

Cyber Risk Quantification<\/h3>\n

Conducting a cyber risk quantification exercise that extends beyond just a qualitative judgment is critical for any company. Cyber risk quantification capabilities will be key to materiality assessments as part of the SEC 8-K incident disclosures. From this exercise, key stakeholders from XYZ, including the risk manager and chief information security officer, would like to answer the following questions:<\/p>\n