Exploring the Origins of Cyber Insurance and Risk Management with Matt Cullina- Part 1

Alan Gin
, CEO
, ZeroDown Software
This companion blog summarizes Matt Cullina's podcast. As head of TransUnion’s Global Cyber Insurance Group, Matt shares his unique perspective on how risk has transformed over the years.

This is a companion blog to the “The SafeHouse” podcast dated February 18, 2025.

Welcome to an insightful discussion on the origins and evolution of cyber insurance and risk management. Today, we have the pleasure of hearing from Matt Cullina, the head of TransUnion’s Global Cyber Insurance Group. Matt’s journey from a history major to a leader in the cyber insurance space offers a unique perspective on how our understanding of risk has transformed over the years. Listen to the original podcast here: https://safehouseinitiative.org/origins-cybersecurity-and-beyond-with-matthew-cullina-part-1/

From History to Cyber Insurance

Matt shares, “My journey has been quite interesting to get to here. I’ve been with TransUnion since an acquisition in 2021, prior to which I was with a company called CyberScout.” His background in the insurance world laid the foundation for his current role, where he delves into the complexities of cyber risks.

The Roots of Risk Management

Matt emphasizes the importance of understanding the origins of words and concepts in risk management. “It all comes down to really getting to the root of all things and understanding where the risk lies.” This exploration of origins helps demystify modern concepts, especially in a rapidly changing digital landscape.

Identity Theft: A Growing Concern

During the early 2000s, Matt was involved in researching identity theft, which was emerging as a significant threat. “Identity theft was the fastest-growing white-collar crime at that time,” he explains. The federal government responded by updating laws to provide victim support, establishing a framework for addressing these crimes.

The Concept of Crisis

Matt delves into the etymology of the word “crisis,” which has Greek origins meaning a decision point. “It signifies an inflection point where you have a situation happening and then there’s a crossroad,” he notes. This understanding of crisis is crucial in navigating today’s complex cyber threats.

Cyber: The Control of Machines

When discussing the term “cyber,” Matt highlights its Greek roots meaning to steer. “It’s basically people’s control over machines,” he states. This concept is vital as it underscores the human element in technology and the importance of maintaining control in an age where technology evolves rapidly.

The Evolution of Cyber Risks

Matt reflects on how cyber risks have evolved, stating, “The risks have evolved crazily.” He recalls a time when scams were rudimentary, relying on methods like mail fraud and phone scams. “It just shows you how things have changed,” he emphasizes, noting that while tactics may have advanced, the fundamental nature of fraud remains consistent.

The Role of AI in Cyber Risk

As artificial intelligence becomes more prevalent, Matt acknowledges the dual role it plays in enhancing security while also creating new risks. “We all have to be able to utilize those AI tools,” he advises. Ignoring these advancements can leave organizations vulnerable as threat actors also leverage AI to improve their tactics.

The Historical Context of Insurance

Matt takes us on a historical tour of insurance, tracing its roots back to ancient times. “Even in Hammurabi’s code, there’s a record of insurance for shipping for trade,” he notes. The Great Fire of London served as a pivotal moment for the insurance industry, leading to the mass adoption of property insurance as a protective measure against fire-related losses.

Modern Cyber Insurance

Transitioning to modern times, Matt discusses how cyber insurance emerged as a necessity for businesses dealing with intangible risks. “The early types of cyber insurance started out as errors and omission coverage,” he explains. With the advent of data breach laws, businesses began to recognize the need for specific coverage tailored to cyber risks.

Looking Ahead

As we conclude this first part of our discussion, Matt leaves us with a crucial reminder: “Cyber risks are fundamentally people problems, not just technological ones.” The need for continuous education and adaptation is paramount in staying ahead of cyber criminals.

Join us in the next part of this series as we continue to explore the evolving landscape of cyber insurance and risk management.

For more information on the SafeHouse Initiative and to learn how you can protect your business, visit safehouseinitiative.org.