Ransomware
The RUSI report also found “no compelling evidence” that organizations with cyber insurance were more likely to pay ransom than those without it. According to the U.K. government’s 2023 cybersecurity breaches survey, 57 percent of businesses said they have a rule or policy to not pay out ransomware payments — meaning cyber insurance doesn’t seem to push organizations to shell out ransoms. But instead of stopping ransom payments, RUSI advocates for interventions that would ultimately create more pathways for victims to avoid ransom payments.