Organizations that eschew cyber insurance give up not only financial protection but also advice from the insurer on improving the security of their systems.