As cyber risk keeps changing, insurers are drawing firmer lines while executives focus on resilience and claims face stricter scrutiny.