Cyber insurance: what it covers and what it doesn't

Cyber insurance helps cover costs after a breach: forensics, legal, notification, sometimes ransom. **It typically requires:** Multi-factor authentication, backups, endpoint protection, and sometimes specific security controls. **It does not replace:** Good security practices, employee training, or vendor due diligence. **Before buying:** Know your policy's exclusions, deductible, and whether your current security posture qualifies you.