Insurance companies will not

provide cyber insurance

(at any price) to organizations:

  • Lacking basic security controls in place
  • If known security vulnerabilities are present