DeNexus Resources - Industrial Cyber Risk Quantification

The cyber insurance gap: why OT losses land in property

DeNexus — Thu, 12 Nov 2026 19:04:35 GMT

A June paper from the Bank for International Settlements' Financial Stability Institute and the IAIS puts a number on a problem underwriters have long described. Only 1% of global economic cyber losses are covered by cyber insurance. And in actual attacks, most losses have been claimed under property policies that were never designed to cover cyber.

FAIR was built for IT. In OT, there are gaps to fill.

DeNexus — Tue, 10 Nov 2026 14:09:21 GMT

Summary

FAIR (Factor Analysis of Information Risk) is the most widely used model for putting cyber risk in financial terms. It splits risk into two questions: how often a loss happens, and how much it costs when it does. That works well for data breaches and ransomware on office networks. In a plant, a substation or a pipeline, the same two questions have different answers, and FAIR as published doesn't reach them.

OT Cyber Risk Intelligence Newsletter – October 2026 | DeNexus

DeNexus — Thu, 15 Oct 2026 04:37:16 GMT

A number read in isolation gets interpreted against whatever reference the reader happens to carry — and that’s how risk estimates produce reflexive conservatism or false confidence. This month’s DeNexus newsletter makes the case that benchmarks and executive reporting are what turn an OT risk number into a decision.

Building a Multi-Year OT Cyber Risk Management Program with Clearway

DeNexus — Mon, 05 Oct 2026 18:49:48 GMT

Missed the live session on September 30? Watch the full recording below. Scott Hooper, Director of Cybersecurity at Clearway, shares five years of lessons from building an OT cyber risk program across a renewable fleet, from a first device inventory to quarterly reporting for leadership and insurers.

Industrial Cyber Insurance: Why Visibility Is the Market's Biggest Challenge

DeNexus — Fri, 02 Oct 2026 15:25:00 GMT

Industrial cyber risk is one of the fastest-growing and least understood corners of the insurance market. In our recent webinar, we asked a practising underwriter what's holding the market back, and what it will take to unlock more capacity for OT-heavy risks.

DeNexus Joins the ISA Global Cybersecurity Alliance (ISAGCA)

DeNexus — Tue, 22 Sep 2026 16:29:19 GMT

DeNexus has joined the ISA Global Cybersecurity Alliance (ISAGCA), the collaborative forum created by the International Society of Automation to strengthen OT cybersecurity through education, knowledge sharing, and the ISA/IEC 62443 series of standards.

OT Cyber Risk Intelligence Newsletter – September 2026 | DeNexus

DeNexus — Wed, 09 Sep 2026 13:35:37 GMT

In OT, the question isn't what scores worst — it's what measurably reduces loss when tested. That's the through-line of this month's DeNexus OT Cyber Intelligence Newsletter.

What the New US Bulk-Power Emergency Order Actually Does

DeNexus — Mon, 31 Aug 2026 20:04:36 GMT

The new national emergency is a supply-chain intervention, not an immediate cyber-response to recent attacks on US water utilities or the reported UK generating-plant incident.

India Just Made OT Cyber a Board Problem. NERC CIP Shows Where That Road Leads.

DeNexus — Tue, 25 Aug 2026 05:01:32 GMT

On July 31, 2026, India's Central Electricity Authority notified the Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026. They come into force on April 1, 2027. For anyone who has spent time inside a control room, this is the moment India's power sector stopped treating OT cybersecurity as guidance and started treating it as law.

CIP-015-2 Is Approved: What NERC CIP Utilities Need to Know Through 2031

DeNexus — Tue, 25 Aug 2026 04:50:08 GMT

Earlier this year, DeNexus wrote about the NERC CIP Roadmap 2026: What's Changing and How CRQ Helps as a perspective for OT cyber leaders, CIP compliance teams, and senior decision makers.