Zurich and its companions suggest six indicators that would present readability: the proportion of organisations with cyber insurance coverage or audit certification, the share of exploited vulnerabilities older than one yr, the variety of vital cyber incidents, the typical time to containment, the imply time to revive operations, and the proportion of unfilled cybersecurity positions.

