Nexialog Consulting participates in the 6th European Congress of Actuaries (ECA 2026)
From Text to Actuarial Modelling: The Role of NLP and LLMs in Cyber Risk Assessment
Nexialog Consulting is participating in the 6th European Congress of Actuaries (ECA 2026) "United in diversity", bringing together researchers, practitioners and industry experts to explore the concrete contributions of data science to the evolution of actuarial professions.
In this context, Nexialog Consulting will host a technical presentation on cyber risk modeling, combining actuarial approaches and artificial intelligence.
📅 June 18-19, 2026
Presentation: From Text to Actuarial Modelling: The Role of NLP and LLMs in Cyber Risk Assessment
Speaker: Hugo Rapior, R&D Program Manager – Nexialog Consulting
Topic: Cyber - Artificial Intelligence and Data Science
Abstract:
Cyber risk has become one of the main challenges facing the insurance industry today. For the seventh consecutive year, cyber risk has been ranked as the Number 1 concern for the insurance sector, ahead of climate risk by France Assureurs in the Prospective Mapping Report 2025. As an emerging risk, it is characterized by scarce historical data, high claim heterogeneity, and the occurrence of extreme events with major financial impacts.
To address these challenges, this research explores the potential of textual data as a novel source of actuarial information. The Privacy Rights Clearinghouse (PRC) database, which has recorded thousands of data breach incidents since 2005, provides a key foundation for analysis. Prior work by Kher, Lopez and Rapior (2023) demonstrated that textual incident descriptions can be leveraged through Natural Language Processing (NLP) and neural networks to assess claim severity even in the absence of quantitative information.
Using the updated PRC 2025 extraction, this study extends the analysis by mobilizing Artificial Intelligence and Large Language Models (LLMs) to structure and exploit unstructured text, thereby improving the actuarial modelling of cyber claims.
Methodological approach
The main methodological steps include:
- Comparative analysis of PRC databases (2019 vs 2025), data harmonization, and the application of Extreme Value Theory to characterize cyber loss severity
- Classification of incidents using machine learning algorithms
- Severity modelling through sequential neural networks (LSTM), which outperform classical models (logistic regression, SVM, random forests, XGBoost), particularly for high-severity claims (starting at the 95th–99th percentiles of the severity distribution)
- Generation of synthetic incident descriptions using LLMs to enrich training datasets and simulate extreme scenarios
- Evaluation of model robustness and the contribution of synthetic data to improving predictive effectiveness
Enhanced complementarity between actuarial science and data science
This approach highlights the complementarity between actuarial expertise and data science, fostering a deeper understanding of cyber risks and strengthening the resilience of the insurance industry in the face of rapidly evolving digital threats.
Through this work, Nexialog Consulting demonstrates the importance of collaboration between actuarial expertise and data science to:
- better quantify emerging risks
- strengthen the resilience of the insurance sector
- support the transformation of insurance professions in the face of cyber and technological challenges
