Obviously, there is a market for products like this. If insurance companies push potential cyber clients into carrying out IT security audits as a prerequisite, then it makes the systems more resilient - so there are positives. But at the same time, companies still have to keep their personnel and systems up to date. Insurance should never be an excuse for complacency when it comes to preparing for cyber threats.