Cyber security is an important issue to the insurance companies. The insurance companies are obviously data driven and have significant sources of data on data breaches. However, data breach is not a significant issue for ICS cyber security. ICS cyber incidents (malicious and unintentional) can, and have, led to significant equipment or environmental damage, business interruption, and deaths. These significant impacts need to be considered in developing cyber insurance policies. Consequently, I will be speaking Monday September 28th at the Business Insurance Cyber Risk Summit in San Francisco on the state of ICS cyber security and summary of ICS cyber incidents that have occurred to date.