In September, the European Insurance and Occupational Pensions Authority published a report titled ‘Cyber Risk for Insurers- Challenges and Opportunities’. This paper discusses the findings of the report with respect to cyber risk as an element of an insurer’s own operational risk profile and provides supplementary insight gained from assisting firms in this area.