Focus on Cyber Insurance: How Quantifying Risk Is Reshaping Security