Comprehensive cyber insurance covers both mitigations against attacks (by that we mean pre-emptive measures) as well as covering any costs that arise should a breach occur.