45% of organizations reported that their cyber insurance policy could be voided if required security controls were not in place.