Resilience and the Rising Stakes of Cyber Risk

In this episode of On Aon, our cyber experts explore the escalating scale and complexity of cyber threats, from AI-driven attacks to systemic third-party risks. Hosted by Nancy Eaves, product leader for Cyber Solutions, and featuring insights from Brent Rieth, global cyber leader, and David Molony, EMEA head of cyber solutions, the conversation explores the evolving regulatory landscape, the strategic use of cyber insurance and the critical role of executive engagement in managing cyber risk.

Key Takeaways:

• Threat actors are using AI to scale attacks like phishing and ransomware, while organizations are deploying AI to improve detection, response and risk quantification.
  
• Cybersecurity has become a board-level priority, with executives embedding it into enterprise risk management due to its material impact.
  
• Global regulatory developments are encouraging greater transparency in cyber incident reporting, reducing reputational stigma and enhancing collective defense.
  
• Despite rising claims, cyber insurance pricing has declined thanks to market maturity, improved risk modeling and diversified underwriting strategies.
  
  Experts in this episode:
• Nancy Eaves — Product Leader, Cyber Solutions, Aon (Host)
• Brent Rieth — Global Cyber Leader, Cyber Solutions, Aon
• David Molony — Head of Cyber Solutions EMEA, Aon

Key moments:

(0:55) The increase in frequency of reported cyber incidents, including AI-driven threats, ransomware and cloud and identity-based intrusions.

(3:50) The reputational impact of cyber incidents on organizations.

(13:30) The factors contributing to the buyer-friendly market for cyber insurance

Additional Resources:

2025 Global Cyber Risk Report

Soundbites:

David Molony: “Ultimately, we are seeing threat actors leveraging generative AI to create highly personalized phishing campaigns and deepfake content, making social engineering more effective.”

Brent Rieth: “I'd add it's important to continue to drive a holistic approach to navigating cyber risk. It's incredibly complex. It can't be managed in isolation by any individual stakeholder.”