Secure by DesignBoiler Safety
Front
In the 1850s, boiler explosions were routine, sometimes deadly, and dismissed as acts of God. They were not. They were design.
The Hartford Steam Boiler Inspection and Insurance Company (HSB), founded in 1866, set standards for how boilers were designed and built, then inspected them in service. It would not insure what it had not inspected. Insurance rewarded better design, not just recovery.
Cyber insurance stops at the buyer. It prices their risk and pays their claim. The maker of the defective software pays nothing.
Back
Discussion prompts
- How does your organization currently create a financial incentive for better security?
- What would a boiler-inspection model look like for software — who would play the role of HSB?
- How could insurance mechanisms be used to reward secure software design in your sector?