Cyber insurance has become a boardroom issue. High-profile ransomware attacks, data breaches and system outages dominate headlines.