One of the things that insurance companies are requesting is evidence of internal policies and procedures demonstrating that your business has a plan about how to prepare for and defend against cyber based threats.