That tells me insurance companies don't know how to assess the risk. However, insurance executives downplay fraud potential. We're more concerned about the volatility of laws as the e-commerce world emerges. Also, technology reduces some risks. E-signatures may be harder to forge.
Premiums tend to be inversely proportional to the risk management the underwriter imposes.
Some approve applicants based on a detailed questionnaire. Others require a security audit and ongoing monitoring. Calif. If Counterpane monitors your security, you are automatically eligible for a policy covering revenue and information-asset losses caused by Internet security breaches. J.S. Wurzler also uses extensive risk management. You may have to upgrade security significantly to qualify for a policy with a reasonable premium and reasonable coverage.