Insurers define what's required in order to get a cyberinsurance policy, and they also determine what premium discounts will be offered. Still, not much has been defined on either side in terms of standards or best practices for coverage and pricing.