<?xml version="1.0" encoding="UTF-8"?><AQE.QER VERSION="2"><QUESTION QID="E-007607-17" AIDREF="AE-007607-17" LEG.VAL="WQ"><HEAD.Q><TI1><P.WQ>Question for written answer<NO.WQ QID="Q-E-007607-17">E-007607-17</NO.WQ></P.WQ><P.WQ>to the<DEST.WQ ORG="COM"> Commission</DEST.WQ></P.WQ></TI1><TI2><P.WQ>Rule 130</P.WQ><P.WQ><AUTHOR.WQ PERSID="118859">Roberta Metsola</AUTHOR.WQ><POL.GROUP GR="PPE">(PPE)</POL.GROUP></P.WQ></TI2><P.WQ><DATE.WQ DATE.DOC="20171211">(11 December 2017)</DATE.WQ></P.WQ></HEAD.Q><OBJ.Q OBJID="O-E-007607-17"><INT.OBJ.Q>Subject:</INT.OBJ.Q><TXT> Cyber insurance</TXT></OBJ.Q><CONTENTS CTNID="QC-E-007607-17"><P>Cyber insurance is slowly gearing up in Europe. In fact, companies are starting to offer more policies to cover losses from hacking incidents, according to data published by the European Union Agency for Network and Information Security (ENISA).</P><P>In September&#xa0;2017, the Commission proposed a new certification programme that will identify the security level of different technology products.</P><P>As a result of this proposal, will the Commission propose specific criteria for the kind of damage that should be covered by insurance providers in case of cyber‐attacks?</P></CONTENTS></QUESTION></AQE.QER>