Do Lenders Price Firms’ Cybersecurity Risks? | 국외연구자료

KDI 경제교육·정보센터

Economic Information and Education Center

최신자료

Do Lenders Price Firms’ Cybersecurity Risks?

CEPR

2025.06.12

Firms are increasingly exposed to cybersecurity risks. Using syndicated loan data covering US firms, we examine how lenders price firms’ ex-ante cybersecurity risks. Our findings indicate that lenders on average charge a 4 to 13 basis points higher loan rate when a firm exhibits greater cybersecurity risks over time. Furthermore, we document that the pricing of cybersecurity risks differs between lender types, as well as within the same lender type depending on their level of awareness of the risks. Commercial banks tend to adopt a more stringent approach to pricing cybersecurity risks compared to non-bank lenders. They also impose more financial covenants and monitor more intensively as firms become riskier. Even within commercial banks, the pricing of cybersecurity risks is primarily driven by lenders who recognize their own cybersecurity risks and have discussed internal risk management policies. These findings highlight the importance of lender awareness on the pricing of unconventional risks. Lastly, the purchase of cybersecurity insurance does not mitigate higher loan spreads.

목록보기