Insurance companies impose technical requirements such as patch management, mobile device management and anti-malware protection as well as organizational measures such as contingency plans and employee training. A comprehensive risk management system is often a prerequisite for insurance cover.