Some cyber policies don’t cover incidents from being careless or ignoring risks. They don’t cover insider threats or cases where better security could have stopped it. It’s key to know what’s not covered and to be secure.