A Comprehensive Actuarial Framework for Measuring and Managing Cyber Risk in Nigerian Financial Institutions

This study develops a comprehensive actuarial framework for measuring, pricing, and managing cyber risk in Nigerian financial institutions, contributing an original interdisciplinary methodology that bridges actuarial science, computer security, and financial risk management. Cyber risk is one of the fastest-growing risk categories facing Nigerian banks and insurance companies, driven by expanding digital financial services, rising cybercrime sophistication, and inadequate institutional cyber security investment. Despite the scale of the threat, cyber risk remains poorly measured and almost entirely uninsured in Nigeria, reflecting the absence of credible actuarial models for cyber loss estimation. This study develops a four-component actuarial cyber risk framework: a threat frequency model using Nigerian cybercrime incident data from the Economic and Financial Crimes Commission and CBN fraud reports from 2015 to 2023; a vulnerability exposure model mapping institution-specific digital asset inventories; a loss severity model incorporating contagion, reputational, and regulatory fine components calibrated to Nigerian financial sector breach data; and a cyber portfolio correlation model capturing systemic cyber event risk through common technology dependencies. Monte Carlo simulation generates institution-level and sector-level cyber loss distributions. Cyber insurance pricing implications are derived and compared against the negligible current market premiums for the few available cyber products. Findings reveal that expected annual cyber losses for large Nigerian banks exceed current cyber insurance capacity by an order of magnitude, and that systemic correlation in cyber risk creates catastrophic aggregate exposure in tail scenarios. The study contributes an original Nigerian financial sector cyber risk model and recommends NAICOM and CBN develop a joint cyber risk minimum capital standard.

Keywords: cyber risk, actuarial framework, financial institutions, cyber insurance, Nigeria.