We review the academic literature on “cyber risk” and “cyber insurance” in the fields of business (management, economics, finance, risk management and insurance) and actuarial science. Our results show that cyber risk is an increasingly important research topic in many disciplines, but one that so far has received little attention in business and actuarial science. Business research has documented the manifold detrimental effects of cyber risks using event studies and scenario analyses, while economic research is especially concerned with trade-offs between different risk management activities. Quantitative research including papers published in actuarial journals mainly focuses on loss modelling, especially taking dependencies and network structure into account. We categorize the empirical literature on cyber risk to filter out what we know on the frequency, severity and dependence structure of cyber risk. Finally, we list open research questions which demonstrate that cyber risk research is still in its infancy and that there is ample room for future research.

我们回顾了商业（管理，经济学，金融，风险管理和保险）和精算科学领域中有关“网络风险”和“网络保险”的学术文献。我们的结果表明，网络风险已成为许多学科中越来越重要的研究主题，但到目前为止，在商业和精算科学领域很少受到关注。商业研究使用事件研究和情景分析记录了网络风险的多种有害影响，而经济研究尤其关注不同风险管理活动之间的权衡取舍。包括在精算杂志上发表的论文在内的定量研究主要集中在损失建模上，尤其是考虑了依赖性和网络结构。我们对网络风险的经验文献进行分类，以过滤掉我们对网络风险的频率，严重性和依赖性结构的了解。最后，我们列出了一些开放的研究问题，这些问题表明网络风险研究仍处于起步阶段，并且有足够的空间进行未来研究。