When to Treat Security Risks with Cyber Insurance. (2018)