Cyber insurance, particularly around ransomware, is moving towards a world where insured businesses have strong cyber resilience, well-defined disaster recovery plans, and only use insurance to mitigate the impact of attacks and the cost of downtime while they recover via immutable backups, he adds.