> Companies should make a solid effort to prevent the possibility Isn't this what they do and then hedge the risk by covering their potential losses with insur

> Companies should make a solid effort to prevent the possibility Isn't this what they do and then hedge the risk by covering their potential losses with insurance? If companies are not doing a good enough job with security, why does the cyber insurance not cost more? Priced properly, companies can choose between buying more coverage versus throwing more money at the "security problem."