Companies should consider instituting and strengthening plans for when — not if — they suffer a cybersecurity incident.

Many small and midsize businesses are going without cyber coverage, perhaps because of confusion about how to get the right policy. That doesn't have to happen.

Many small and midsize businesses are going without cyber coverage, perhaps because of confusion about how to get the right policy. That doesn't have to happen.