CISOs are increasingly asked to help obtain cyber insurance. While understanding the risk environment is essential, it’s only a starting point. They also need to know risk-transfer estimations, attack events to prioritize, cost expectations and how DR plans affect post-breach outcomes. This session will provide a simple model that accommodates the issues and corrects for the biggest challenges.