Deriving value from cyber insurance to mitigate business interruption