should your middle market organization be investing in cyber insurance