This is a very interesting framework Deloitte has helped to put together – a “Cyber Value At Risk” concept. Also, that an explicit part of the intent is to help create new trading markets around that risk. From the release:
The purpose of the cyber value-at-risk approach is to help organizations make better decisions about investments in cybersecurity, develop comprehensive risk management strategies, and help stimulate the development of global risk transfer markets. The framework helps organizations address questions such as how vulnerable they are to cyberthreats, how valuable the key assets at stake are, and who might be targeting them.