Part of the responsibility of being a leader in risk management or cybersecurity isn’t just to prevent an attack, it’s to minimize damage and mitigate the extent of an attack if a compromise ends up happening. And that mentality should be adopted by all.
Article Link: What is Cyber Insurance? (and how do I know if i need it?)