The insurance policy would be tied to following some (infosec) best practices. In the best of all worlds, insurances would then check on their customers to make

The insurance policy would be tied to following some (infosec) best practices. In the best of all worlds, insurances would then check on their customers to make sure best practices are followed in the same way that we follow best practices for avoiding fires in terms of building construction and not having flammable materials lying around too much.