Today, almost all enterprises are highly dependent on IT services. Thus, high availability IT services and the cost of downtime have received a lot of attention in recent years. One increasingly used tool for cyber risk management and transfer is cyber insurance, which typically offers some form of business interruption coverage. However, cost structures of IT service outages are still poorly understood, as costs are often just reported as lump sums. This article contributes a multiple case study of IT service outage cost in three sectors in Sweden: transport companies (\(N=11\)), food companies (\(N=9\)) and government agencies (\(N=19\)). The contribution is three-fold: (i) the measurement instrument itself, (ii) the insights into different cost structures gained, and (iii) the implications of different cost structures on availability investment strategies. Whereas some enterprises incur only a fixed outage cost, some incur (almost) only lost productivity or almost only lost revenue. In the public sector, lost revenue is often negligible. The results are further contextualised by a discussion of cyber insurance implications.

中文翻译：

---

IT服务中断成本：案例研究及其对网络保险的影响

如今，几乎所有企业都高度依赖IT服务。因此，近年来，高可用性IT服务和停机成本引起了很多关注。网络保险管理和转移的一种越来越常用的工具是网络保险，通常提供某种形式的业务中断保障。但是，IT服务中断的成本结构仍然知之甚少，因为成本通常只是一次性报告。本文对瑞典三个部门的IT服务中断成本进行了多案例研究：运输公司（\（N = 11 \），食品公司（\（N = 9 \））和政府机构（\（N = 19） \））。其贡献是三方面的：（i）衡量工具本身，（ii）对获得的不同成本结构的见解，以及（iii）不同成本结构对可用性投资策略的影响。有些企业仅产生固定的中断成本，而有些企业（几乎）仅损失生产力或几乎仅损失收入。在公共部门，收入损失通常可以忽略不计。通过讨论网络保险的含义，进一步对结果进行了背景分析。