Cyber insurance often only covers organisations up to a certain (and relatively small) amount if a breach was to occur.   A practical assessment should quickly highlight any areas of weakness that can then be appropriately remediated, reducing the chance that a cyber insurance policy is ever going to be required.