I bet that risk insurance for an attack is pricey. Aon bought a cyber security firm a couple of years ago. https://www.aon.com/cyber-solutions/solutions/digital-forensics/