Cyber insurance as a part of a cyber resilience program