Most companys already do. Unfortunately for the insurance companys their actuarial tables are backwards looking and cyberattacking is one of the fastest growing

Most companys already do. Unfortunately for the insurance companys their actuarial tables are backwards looking and cyberattacking is one of the fastest growing industrys. The smart insurance companys are all getting out of cybersecurity insurance because the premiums on the policys they wrote 10 years ago when the average attack cost $1,000 to remediate do not look so good when the average attack now costs $100,000 to $1,000,000 to remediate. Since the expected probability of a successful attack in any given year that requires payout is approaching 100% these days the insurance needs to be priced something like 10x-100x the prevailing prices to be survivable. Eventually it will shake out once the cyberattacking industry becomes mature because at that point backwards looking projections make sense. Until that time, we are in for a wild ride.