AI compliance framework for cyber insurance
*Chetan Prakash RatnawatCorresponding authorChetanpr7110@gmail.comDepartment of Cyber SecurityJiwaji UniversityGwalior, Madhya Pradesh, 474011, IndiaView full profile →
* Corresponding author · click or hover a name for details
- Received:
- 01 Jun 2026
- Published Online:
- 30 Sep 2026
- Article type:
- Research Article
- Language:
- EN
- Article no.:
- JIOS-2435
- Pages:
- 3381–3392
Abstract
AI systems are increasingly playing a pivotal role in the operation of cyber insurance products, from risk assessment to underwriting and claims handling. However, in the field of cyber insurance regulatory compliance is done mainly through disconnected, passive and manual controls which are mainly slow in adapting to changing cyber threats and new regulatory requirements. The message of this paper is the growing disconnect between the AI-driven cyber insurance workflows and the traditional compliance framework. It offers an AI Compliance framework that seamlessly connects with regulatory intelligence, cybersecurity risk scoring, underwriting, and claims management & governance in a very straightforward way.
The framework builds on the ongoing discussions on AI governance, RegTech and cyber insurance and provides a blueprint for regulators to be resilient in an extremely volatile and volatile cyber risk landscape.
Keywords
Subject Classifications
References
[1] J. Whittlestone, R. Nyrup, A. Alexandrova, K. Dihal, and S. Cave, “Ethical and societal implications of algorithms, data, and artificial intelligence: A roadmap for research,” Nuffield Foundation, London, U.K. (2019).
[2] Z. C. Lipton, “The mythos of model interpretability,” Commun. ACM, vol. 61, no. 10, pp. 36–43 (2018).
[3] V. Ramisetty and S. S. Saheb, “Leveraging AI for sustainable risk assessment in the insurance industry,” Journal of Information & Optimization Sciences, vol. 46, no. 8, pp. 2499–2510 (2025), doi: 10.47974/JIOS-2067.
[4] F. Doshi-Velez and B. Kim, “Towards a rigorous science of interpretable machine learning,” Proc. AAAI Workshop on Human Interpretability in Machine Learning, pp. 1–6 (2017).
[5] M. Eling and M. Lehmann, “The impact of artificial intelligence on the insurance industry,” Risk Management and Insurance Review, vol. 21, no. 3, pp. 359–396 (2018).
[6] J. Brockett and X. Xia, “Big data analytics in insurance risk management,” IEEE Access, vol. 9, pp. 154812–154826 (2021).
[7] M. Eling, D. Nuessle, and J. Staubli, “The impact of artificial intelligence along the insurance value chain and on the insurability of risks,” The Geneva Papers on Risk and Insurance – Issues and Practice, vol. 47, pp. 205–241 (2022), doi: 10.1057/s41288-020-00201-7.
[8] R. Böhme, G. Kataria, and J. Grossklags, “Risk analysis of cyber insurance,” in Proc. 13th Int. Conf. Financial Cryptography and Data Security, pp. 72–89 (2019).
[9] D. K. Tosh, S. Sengupta, and S. Shetty, “Cyber insurance: Modeling and simulation of cyber risk,” IEEE Trans. Netw. Service Manag., vol. 17, no. 3, pp. 1835–1848 (2020).
[10] K. Rieck and P. Laskov, “Machine learning for cyber risk quantification,” IEEE Computer, vol. 57, no. 4, pp. 44–53 (2024).
[11] B. Mittelstadt, C. Russell, and S. Wachter, “Explaining explanations in AI,” in Proc. ACM Conf. Fairness, Accountability, and Transparency, pp. 279–288 (2019).
[12] J. Kleinberg, S. Mullainathan, and M. Raghavan, “Inherent trade-offs in the fair determination of risk scores,” in Proc. ITCS, pp. 1–23 (2017).
[13] A. R. Hevner and S. Chatterjee, “Design science research in information systems,” IEEE Computer, vol. 56, no. 8, pp. 76–84 (2023).
[14] R. K. E. Bellamy, K. Dey, M. Hind, S. C. Hoffman, S. Houde, K. Kannan, P. Lohia, J. Martino, S. Mehta, A. Mojsilović, S. Nagar, K. Natesan Ramamurthy, J. Richards, D. Saha, P. Sattigeri, M. Singh, K. R. Varshney, and Y. Zhang, “AI Fairness 360: An extensible toolkit for detecting and mitigating algorithmic bias,” IBM Journal of Research and Development, vol. 63, no. 4/5, pp. 4:1–4:15 (2019), doi: 10.1147/JRD.2019.2942287.
[15] D. Gunning and D. Aha, “DARPA’s explainable artificial intelligence program,” IEEE Intelligent Systems, vol. 34, no. 2, pp. 44–58 (2019).
[16] A. K. Sharma, N. Babbar, P. Pal, N. K. Verma, and R. K. Saini, “AI-powered framework for real-time dark web monitoring and cybersecurity threat detection,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 28, no. 8, pp. 2955–2966 (2025), doi: 10.47974/JDMSC-2440.
[17] M. Hind, “Explaining explainable AI,” IEEE Security & Privacy, vol. 17, no. 5, pp. 84–88 (2019).
[18] K. R. Varshney, “Trustworthy machine learning and artificial intelligence,” IEEE Security & Privacy, vol. 17, no. 6, pp. 73–80 (2019).
[19] C. O’Neil, Weapons of Math Destruction: How Big Data Increases Inequality and Threatens Democracy, New York, NY, USA: Crown Publishing (2016).
