The insurance sector has been underwriting cyber risk for about two decades and up until recently, it does not appear that most businesses have given much thought about how to offset cyber risk with a financial instrument like an insurance policy. There are approximately 63 companies offering policies to cover cyber events with the majority of policies being underwritten by just six firms (AIG, Hartford, Chubb, Zurich, ACE, and Beazley). These policies are generally written against data collected from questionnaires that reportedly (from those in cyber that complete them) offer little relevance in determining an actual cyber risk profile.”]
Source: https://www.csoonline.com/article/3198469/cyber-insurance-forum.html