According to the report, Microsoft and AWS are offering the service, but Google is most advanced. “The crux of the approaches is the use of a customer’s IT configuration data provided directly from the cloud providers, which can give insurers a degree of certainty they’ve never before had when assessing the cyber risk of potential policyholders.
While a number of startups have championed the idea of using data on customer security posture to inform cyber insurance decisions, the idea of a vendor taking a hands-on role in co-designing a unique policy for customers is newer. Google Cloud and its insurance partners began publicly offering their “Cloud Protection +” policy in mid-2021.”
Source: Google Cloud, Microsoft and AWS dive into cyber insurance – Protocol