For years, cyber insurers rewarded companies for putting the right defenses in place. Now, they are asking a different question: How fast can you move when those defenses fail? The shift comes as advances in artificial intelligence threaten to shrink the time between the discovery of a software flaw and when hackers use it, forcing insurers to rethink how they evaluate cyber risk. Insurers are now asking more detailed, specific questions of their policyholders about the threat posed by AI, such as how exposed they are to compromises of widely used tools, how quickly they can determine whether they need to deploy patches, and how thoroughly they oversee their vendors.

Full report : Insurers aren’t just looking at the security controls policyholders install, but how quickly they can respond to lightning-fast threats.