Cyber insurance is painfully expensive for many companies. But that sure beats the alternative: being turned down for coverage and having to do without.

Insurance and risk-management experts say avoiding that nightmare scenario is increasingly falling on general counsel as part of their risk-mitigation responsibilities.