Mitigating Cyber Risk through Cyber Insurance