Cyber insurance companies often approve policies even when businesses are not meeting industry cybersecurity standards. Later, when a breach occurs, they conduct a forensic investigation, and deny the claim.