legal implications of cyber insurance