This is an important conversation well worth having.  Cyber Insurance is an important part of an IT Security risk management strategy.  In many industries, despite the best controls, a breach is inevitable.  Having a strong policy in place to offset those costs and provide expertise in the areas like forensics and public relations can be the difference between weathering an event and shuttering the doors of the business.

http://www.scmagazine.com/industry-professionals-discuss-cyber-insurance-adoption-and-best-practices-at-house-hearing/article/485043/