Cyber insurance is a key component in an IT security & risk management program, according to theĀ Federal Financial Institutions Examination Council (FFIEC).