My research encompasses a wide range of topics, with a primary focus on the intersection of cyber insurance and security controls. Specifically, I am dedicated to uncovering the intricate relationship between cyber insurance policies and their influence on overall information security risk management, and vice versa. Furthermore, my research delves into the often-overlooked area of assessing the effectiveness and cost efficiency of security controls. In this capacity, I aim to determine the optimal selection of security controls within predefined budget constraints, ensuring both robust security and financial prudence.