Mandatory Provisions for Cyber Insurance