How to survive the cyber insurance underwriting process