Definitions
Terms used in this paper
These definitions establish how the paper uses its core terms before the argument begins.
- Treaty
- Reinsurance applying to a defined portfolio or class of risks under agreed cedant and reinsurer terms.
- Cedant
- The insurer transferring part of its risk to a reinsurer.
- Evidence coverage
- The proportion and quality of underlying risks for which the required operational evidence is available.
- Normalized evidence
- Provider-agnostic representation of selected control and evidence concepts that retains lineage to the original source.
1. Treaty review needs a common language beneath unlike books
Carriers write cyber business under different appetite, forms, limits, industries, control requirements, and underwriting processes. A reinsurer comparing those books cannot assume that identical labels mean identical evidence.
Using consistent definitions for selected control and evidence dimensions gives the reinsurer a common basis for comparison while preserving the source behind each value. That allows cross-book analysis without requiring every carrier or insured to use the same security stack.
2. Aggregation should not hide missingness
Portfolio averages can look precise while masking sparse underlying data. A treaty view should distinguish values calculated across a well-observed population from values based on a small or stale subset of insureds.
Evidence coverage, freshness, and confidence therefore belong beside aggregate security measures. The reinsurer can see not only what the book appears to look like, but how much of the book actually supports the conclusion.
- Source book
Retain carrier context and the definitions behind each observation.
- Comparable evidence
Align selected control and evidence dimensions without erasing source differences.
- Coverage and freshness
Show how much of the population supports the aggregate and how current it is.
- Treaty review
Interpret the aggregate together with missingness and uncertainty.
Operational evidence informs portfolio review. Treaty terms, loss history, catastrophe modeling, and pricing judgment remain separate inputs.
3. Operational evidence and treaty pricing remain separate
A consistent control-state signal can inform treaty analysis without determining treaty price. Reinsurance pricing also depends on attachment, limits, terms, historical loss, portfolio composition, modeled catastrophe exposure, cedant strategy, and market conditions.
Keeping operational evidence separate allows the reinsurer to test whether it improves portfolio selection, scenario design, or claims outcomes over time. It avoids importing an unvalidated meaning into a pricing model simply because the data is convenient.
4. Material change can be reviewed at several levels
A treaty portfolio can change because the cedant writes new business, insured control states deteriorate, shared dependencies become more concentrated, or external threat conditions change. Those changes occur at different levels and should not be collapsed into one alert stream.
A useful hierarchy lets the reinsurer move from aggregate signals to carrier and insured detail where authorization permits. The drill-down explains whether a portfolio shift came from mix, measurement quality, or actual operating change.
5. The goal is a portfolio view that can be explained
Treaty negotiations will continue to rely on cedant data, actuarial work, catastrophe models, underwriting judgment, and contract structure. Operational evidence adds a more current view of selected conditions within the underlying book.
Its value is highest when the reinsurer can see definitions, evidence coverage, and change over time rather than receiving another opaque portfolio score.
Evidence base
Sources and notes
External foundations are kept distinct from VitalSec implementation notes so readers can see what supports the argument independently and what documents the platform implementation.
External foundations and sources
VitalSec implementation notes
These links document how the argument is implemented or described inside VitalSec. They are not offered as independent validation of the paper's thesis.