Lots of gray areas but also opportunities for smaller insurance shops that can move more rapidly to meet market demands to structure policies that focus on actual business risk as it applies to cyber triggers of harm. Some firms have tools for existing clients or potential clients to measure how good of a risk they are. Some firms are using BitSight or similar technologies.
