Thus, experts see insurance as a logical component of a complete security program. Organizations need a uniform policy for protecting their networks, responding to incidents and assessing the risk of such computer attacks. In fact, new offerings from several leading insurers are specifically targeted at protecting information and reputation assets against security breaches. It doesn't deal well with information. A good policy will protect against cyber attacks, viruses and programmer errors, and against lost income and extra expenses associated with the disruption of electronic activities.
Insurance can also help justify the cost of security in business terms.
An insurance policy creates balance between what you are protecting and what you're spending to protect it. In any case, there's no question that computer security and overall risk management are becoming intertwined. You can't do risk management in the Internet Economy without doing information security. It's not the entire risk management program, but it's an essential component. Infoworld Production Dept.