Understanding the role of cyber insurance