Cyber Insurance: Action Needed to Assess Potential Federal Response to Catastrophic Attacks, Report to Congressional Committees [open pdf - 1MB]
From the Highlights: "Cyber threats to critical infrastructure represent a significant economic challenge. Although cyber incident costs are paid in part by the private cyber insurance market, growing cyber threats have created uncertainty in this evolving market. The Further Consolidated Appropriations Act, 2020, includes a provision for GAO [Government Accountability Office] to study cyber risks to U.S. critical infrastructure and available insurance for these risks. This report examines the extent to which (1) cyber risks for critical infrastructure exist; (2) private insurance covers catastrophic cyber losses and TRIP [Terrorism Risk Insurance Program] provides a backstop for such losses; and (3) cognizant federal agencies have assessed a potential federal response for cyberattacks."
Government Accountability Office: https://www.gao.gov/