Is cyber-insurance now an enterprise security reality?