Due in part to the lack of loss experience in the cyber market and in-depth understanding of cyber threat and behaviour, many cyber catastrophe models are still in their infancy. However, the choice of some market leading companies to incorporate the outputs into their capital modelling means that the market is entering a period of increased scrutiny of cyber models under the regulatory regimes that govern solvency calculations.