Propagation of cyber incidents in an insurance portfolio: counting processes combined with compartmental epidemiological models