Risk Transfer Without Understanding: The Insurance Problem in Cyber
The organizations having the most difficulty with cyber insurance are not the ones with the worst security programs. They are the ones with the largest gap between what their policy says they have implemented and what they have actually implemented.