Cyber systems.
Cyber risk is transitioning from episodic loss to systemic exposure. AI-assisted attack tooling and autonomous defensive response are transforming the attack-defence dynamic, compressing decision loops and increasing propagation speed across shared infrastructure.
In this environment, containment becomes probabilistic rather than enforceable, attribution becomes contested or irrecoverable, and losses propagate across technical, organisational, and contractual boundaries.
Why containment fails
Automation accelerates propagation
Attack systems probe at scale and adapt in real time; defensive systems respond earlier and more aggressively.
Boundaries dissolve
Incidents cross suppliers, platforms, and managed services, undermining independence assumptions across insureds.
Governance gaps widen
Decision authority migrates away from identifiable individuals toward distributed systems operating under broad mandates.
Attribution becomes disputed
Responsibility diffuses across vendors, operators, and software layers, weakening recourse and recovery.