Cyber-insurance policies that can reduce (but not eliminate or fully transfer) the financial impact of incidents are now widely available. Ransomware extortion has increased the hype around cyber insurance. This presentation will provide a detailed look at if and how cyber insurance can play a meaningful role in reducing the financial impact of typical incidents.