> Only now that insurance companies have paid out the nose with ransomware incidents have they started to wise up. Exactly right, and eventually they will GET

> Only now that insurance companies have paid out the nose with ransomware incidents have they started to wise up. Exactly right, and eventually they will GET A CLUE, and require serious security audits to get a sane price on incident insurance. Otherwise they will make you pay gobs and gobs of money, and it will just be cheaper to be sane about your security posture. Otherwise there is zero incentive for the insurance companies to keep paying out the nose on policies they aren't making money from. This has happened to police stations, as they get mismanaged by idiot police chiefs, the insurance providers say.. uh we aren't going to insure you anymore unless you fix your sh*t. As but one example: https://www.theatlantic.com/politics/archive/2017/06/insurance-companies-police/529833/ https://www.theatlantic.com/politics/archive/2017/06/insuran... I see this happening to cyper security policies also, they(insurance companies) will wise up or go broke.