EU insurers face cloud provider contract battle over new cyber security rules
The difference in bargaining power between even the very largest insurers or reinsurers and the hyperscalers providing cloud services will very likely affect negotiating positions
To improve cyber security, Europe’s new Digital Operational Resilience Act will require insurers to perform comprehensive assessments of their contracts with cloud companies and other ICT service providers and seek contract changes if they are insufficiently robust. This may be easier said than done, experts say