Cyber insurance creates virtuous security cycle