#IMOS22 Cyber Insurance: Unpicking the ControversyOrganizations are increasingly turning to cyber insurance coverage in the face of surging attacks. This topic has become particularly controversial due to the role of insurance in covering ransomware payments, with suggestions that it is exacerbating this attack vector. There are also fears that the use of cyber insurance reduces the likelihood of organizations improving their own cybersecurity practices. In this session, we will analyze the impact of cyber insurance on security, looking at both the pros and cons, and debate how it should evolve going forward, including whether it should be covering ransomware payments.