Many leaders still assume cyber insurance exists to absorb risk after an incident. In reality, that assumption has become one ...