Mark Rasch reminds us of the answer: risk is worth insuring when you and the insurer agree on what is being covered.

http://storefrontbacktalk.com/securityfraud/the-legal-perils-of-cyber-insurance-for-retailers/