…but they want to see that you are taking the proper steps to help mitigate an attack.
According to this Dark Reading article, the three most important factors to show insurability are; a company’s awareness of cyber risk, the ability to prevent an attack or more importantly blunt its effects and the speed at which a company can come back online after an attack occurs.