Category: Premium & Actuarial Pricing

Burning Cost

Also known as: Burn Cost, Burning-Cost Ratio, Burning Cost Method

Simply put

Burning cost is a way insurers and reinsurers use past claims to help set the price of coverage. In simple terms, it looks at how much has been paid out in claims relative to the amount being insured, and uses that historical experience to estimate a fair premium. It is a pricing tool based on loss history rather than a measure of resilience or a type of coverage.

Formal definition

Burning cost is a pricing method that expresses incurred losses as a ratio to a base of exposure or premium, commonly used to determine premiums for reinsurance and particularly excess of loss (XOL) treaties. In one formulation it is the average claim cost per unit of exposure (incurred claims divided by an exposure measure); in another it is expressed as the ratio of incurred losses within a specified excess layer to the theoretical premium needed only to cover those losses. It evaluates past claims experience to inform appropriate premium levels; note that the exact definition and calculation base vary by source and treaty structure. Burning cost is a reinsurance pricing concept and is distinct from resilience metrics and from the scope of first-party or third-party coverage.

Why it matters

Burning cost is one of the foundational tools by which reinsurance premiums are estimated, and in the cyber context it directly shapes the price and availability of the excess of loss (XOL) capacity that primary insurers rely on to write coverage. Because the method anchors pricing to historical claims experience, it inherits the well-known limitation of any backward-looking approach: past cyber losses may be a poor guide to future ones in a threat environment where attack techniques, ransomware economics, and aggregation risk evolve rapidly. Risk managers and brokers who understand how burning cost is derived are better positioned to interpret why cyber reinsurance pricing can shift sharply as loss history matures.

The method matters most where credible loss data is thin. Cyber is a comparatively young line with limited long-run claims history, and burning cost calculations are sensitive to the exposure or premium base chosen and to whether recent large losses are treated as representative. This makes the technique valuable but contestable, and reinsurers frequently supplement or adjust it with exposure-based and catastrophe-modeled approaches. Underwriters and brokers should recognize that different sources define burning cost differently, so a quoted figure is only meaningful alongside the calculation base and treaty structure behind it.

Finally, burning cost is a pricing concept, not a measure of an insured organization's resilience or preparedness. A favorable burning-cost history reflects claims experience within a treaty, not the strength of any single insured's controls or continuity planning. Confusing the two can lead to misplaced assumptions about how much protection a program actually provides.

Who it's relevant to

Underwriters and reinsurance pricing actuaries

Those pricing cyber XOL treaties use burning cost as a core technique for translating historical layer losses into premium indications. They must be alert to the sensitivity of the result to the chosen exposure or premium base, the credibility of limited cyber loss history, and the treatment of large losses, and typically pair it with exposure-based methods rather than relying on it alone.

Insurance brokers and reinsurance intermediaries

Brokers placing or advising on reinsurance need to interpret burning-cost figures in context, including which formulation and calculation base a cedant or reinsurer is using, since definitions vary by source and treaty structure. This helps them explain pricing movements and challenge assumptions on behalf of clients.

Risk managers and program buyers

Understanding that reinsurance pricing draws on burning cost helps risk managers anticipate why the cost and capacity behind their cyber programs can shift with loss experience. It is also a reminder that burning cost reflects claims history within a treaty, not their own organization's resilience, controls, or continuity posture.

Inside Burning Cost

Actual Incurred Losses

Burning cost is fundamentally built from the historical losses actually incurred by the insured (or a portfolio) over a defined experience period, typically expressed as paid and/or reserved amounts for cyber claims that fell within the relevant coverage layer.

Exposure or Premium Base

The losses are measured against a denominator such as subject premium, revenue, or another exposure metric, producing a ratio. This normalization allows the raw loss figure to be compared and applied prospectively to a rating base.

Experience Period

The historical window over which losses are gathered. The choice of period matters for cyber, where loss patterns can shift rapidly; too short a window may miss severe but infrequent events, while too long a window may include stale, non-representative experience.

Layer or Attachment Specificity

Burning cost can be calculated for a specific layer of coverage (for example an excess or reinsurance layer), reflecting only losses that pierce a given attachment point, rather than ground-up losses across the whole program.

Loadings and Adjustments

The raw burning cost is typically adjusted with loadings for expenses, profit, trend/inflation, and the volatility or infrequency of large losses before it informs a technical price. The unloaded figure alone is generally not a complete price.

Development and IBNR Considerations

Because claims (particularly liability-oriented third-party cyber claims) can take time to emerge and settle, the method may require adjustment for claim development and losses incurred but not reported, subject to the actuarial approach used.

Common questions

Answers to the questions practitioners most commonly ask about Burning Cost.

Is burning cost the same as the premium an insurer will charge?

No. Burning cost is a technical estimate of expected losses derived from historical claims experience, typically expressed as a rate before loadings. It is an input to pricing, not the final price. The premium an insurer actually charges adds loadings for expenses, profit, uncertainty, capital costs, and other factors, and may also reflect judgment, market conditions, and negotiation. Treating burning cost as the quoted premium confuses a loss-cost estimate with the fully loaded rate.

Does a low burning cost mean an organization has strong resilience or good security?

Not necessarily. Burning cost reflects historical claims or loss experience over the analyzed period; it is a backward-looking actuarial and pricing metric, not a measure of resilience or security posture. An absence of past losses can result from favorable circumstances, short experience periods, unreported events, or changes in exposure rather than effective controls. It is distinct from resilience concepts such as recovery time objective, business continuity capability, or the maturity of a security control framework, and should not be read as validating them.

What data is needed to calculate a burning cost?

A burning cost calculation typically draws on historical loss or claims data over a defined experience period, together with a corresponding exposure base against which losses are measured. The quality of the estimate depends on the completeness and consistency of that data, the length of the period, and how it is adjusted. Where data is sparse, immature, or inconsistently recorded, the resulting figure carries greater uncertainty, which is common in areas where loss history is limited.

How should losses be adjusted before applying a burning cost method?

Practitioners commonly consider adjustments so that past losses are comparable to the period being priced. These may include trending for changes in loss frequency or severity over time, developing immature claims toward their ultimate expected value, and normalizing for changes in the exposure base. The specific adjustments applied depend on the analyst's methodology and the available data, and reasonable professionals may disagree on the assumptions used.

How do burning cost estimates relate to retentions and sublimits in a program?

Because burning cost is often calculated within a defined loss layer, the estimate is sensitive to the retention (the amount the insured absorbs before coverage responds) and any sublimits or caps that bound the layer. Losses below a retention or above a sublimit may fall outside the layer being analyzed, so the same loss history can produce different burning costs depending on how the layer is structured. Clarifying which layer is being priced is essential to interpreting the figure.

When is a burning cost approach less reliable, and what supplements it?

A burning cost approach tends to be less reliable where the experience period is short, losses are infrequent but potentially severe, the exposure has changed materially, or the underlying threat environment is evolving faster than historical data can capture. In such cases practitioners often supplement it with exposure-based methods, scenario or catastrophe modeling, and underwriting judgment. The appropriate blend is a matter of methodology and remains subject to genuine debate among underwriters and actuaries.

Common misconceptions

Burning cost is the final premium the insured will pay.

Burning cost is typically an actuarial or underwriting input, not a finished price. It generally reflects only historical losses relative to an exposure base and usually requires loadings for expenses, profit, trend, and volatility before it becomes a technical or charged premium.

A low burning cost means an organization is well protected or resilient.

Burning cost is a backward-looking pricing and risk-transfer metric, not a measure of security posture or resilience. A favorable historical loss ratio does not reduce the likelihood of a future incident and says nothing directly about controls, RTO/RPO, or continuity capability. It reflects claims experience, which can be distorted by luck, a short experience period, or unreported development.

Burning cost reliably prices low-frequency, high-severity cyber events.

Because it is grounded in actual historical experience, the method tends to understate rare but catastrophic exposures (such as systemic or aggregation events) that may not appear in the experience period. For that reason it is often supplemented or replaced by exposure-based or catastrophe modeling for volatile layers, subject to the underwriter's approach.

Best practices

Select an experience period appropriate to cyber's rapidly shifting loss patterns, and document the rationale, recognizing that too short a window can miss severe infrequent events while too long a window can incorporate stale experience.

Adjust raw burning cost with explicit loadings for expenses, profit, trend/inflation, and volatility, and treat the unloaded figure as an input rather than a technical price.

Account for claim development and incurred-but-not-reported losses, especially for slower-emerging third-party liability exposures, using an actuarial approach suited to the data.

Calculate burning cost at the correct layer and attachment point when pricing excess or reinsurance layers, rather than defaulting to ground-up losses across the whole program.

Supplement burning cost with exposure-based or catastrophe modeling for low-frequency, high-severity and systemic aggregation risks that historical experience may not capture.

Communicate clearly to stakeholders that burning cost is a backward-looking pricing metric and not an indicator of security posture, resilience, or the likelihood of a future incident.