We had assumed that insurers were taking the risk of ICS cyber security seriously. We also thought this could be the driver to get end-users to actually secure their ICSs. Consequently, we intended to have a session on insurer's role in ICS cyber security at the 2013 ICS Cyber Security Conference (
www.icscybersecurityconference.com). Apparently we may have jumped the gun on how insurance companies are becoming a catalyst for improved cyber-security in industrial control system design, products and processes.