Cyber security is a huge threat to society and business, but quantitative literature on cyber risk is scarce. What are the determinants of cyber-attacks? Who is most likely to be affected? And is risk preventable? This research is the first systematic analysis of aggregate implications of firm-level malicious cyber-attacks. The aim is to build an index of systemic cyber risk and help establish an interdisciplinary community of practice to proactively track and manage cyber risk and protect citizens from its threat globally.
WORLDWIDE
Publications
The Anatomy of Cyber Risk
Abstract
We construct novel text-based measures of firm-level cyber risk exposure based on quarterly earnings calls of 12,000+ firms from 85 countries over 20+ years. We categorize each cyber-related discussion into topics that capture sentiment, monetary loss, country names, etc. We document new facts on the worldwide rise of cyber risk and its industrial and geographical composition. We characterize most affected firms and show that our indices can predict future cyberattacks. Cyber risk exposure has significant direct and contagion effects on stock returns. Finally, there is a factor structure in our firm-level measures and shocks to the common factor are priced.