ERMIS: A cybERsecurity Market assurance and Insurance-as-a-Service

This paper presents the cybersecurity assurance and insurance solution developed within the EU-funded ERMIS project. ERMIS aims to deliver cybersecurity assurance and insurance as a service through an innovative marketplace platform that integrates tools, services, and mechanisms for end-to-end cyber risk assessment, certification readiness, and cyber insurance management.

The proposed ERMIS marketplace addresses key limitations of traditional cybersecurity assurance and cyber insurance approaches, including fragmented and reactive processes, limited automation, outdated risk assessment methods, and the lack of continuous integration of real-time cybersecurity data into insurance processes.

The paper describes the architecture and core components of the ERMIS solution, including role-specific dashboards, marketplace services, dynamic bundling of cybersecurity and insurance offerings, user management, certification readiness management, cybersecurity assurance tools, cyber range capabilities, and insurance policy management. Through continuous risk assessment, security testing, cyber threat intelligence, and data-driven insurance processes, ERMIS seeks to strengthen the cyber resilience of SMEs and public organisations and support more adaptive and accurate cyber insurance services.

This work has received funding from the European Union’s Digital Europe Programme under Grant Agreement No. 101128013 (ERMIS).