What is Cyber Systemic Risk?

Published September 12, 2015

“Cyber systemic risk” is Internet-driven risk that threatens to destroy the business viability of industry ecosystems.

While cybersecurity risk may be the familiar and recognizable type of cyber systemic risk, it is only recognizable like the tip of an iceberg is recognizable, because most cyber systemic risk lurks well out of view, deep beneath the surface in the ocean of virtual ones and zeros.

“Cyber systemic risk” generally is the Internet version of the financial crisis’ hard lesson of “systemic risk,” where the world learned that risks or disruptions to one or a few financial institutions could cascade to become risks or disruptions to the broader financial ecosystem. That’s because the inherent inter-linkages and inter-dependencies of financial institutions’ debt and liquidity exposed the then underappreciated fragility of the interwoven financial system.

The financial crisis exposed the need and the requirement for corporations to be more vigilant concerning enterprise risk management (ERM). Consequently the next crisis exposing enterprise risk is less likely to happen from a replay of known financial systemic risks, but from new unappreciated or ignored cyber systemic risks.

Cyber systemic risk is arguably more serious than financial systemic risk. That’s because the Internet inherently is: the most inter-linked, inter-dependent, intermediary system ever created; an insecure and un-private system; and more centralized and concentrated at the top than the financial ecosystem.

And cyber systemic risks are proliferating faster than ever because of the virtual and actual world’s increasingly diverging economics, politics, freedoms, capabilities, playing fields, standards, rules, and limits.

Conceptually, the notion of anticipating, analyzing and alleviating cyber systemic risk first has long been the practical focus of Precursor LLC, and will continue to be going forward.

To make that going forward focus clearer, please see this helpful summary chart of what cyber systemic risk is, and what its core causes are, on Precursor’s new website.

I coined “cyber systemic risk” as a logical and necessary new term and risk subcategory, to identify and spotlight the real but unappreciated, emergent existential systemic risks to companies (beyond cybersecurity threats), from the virtual and actual world’s increasingly diverging realities.

Expect Precursor to flesh out cyber systemic risk more going forward.

[Originally published at Precursor Blog]