So much for peace of mind. Over the past year, obtaining and keeping cyber insurance has almost become an exercise in crisis management. With insurers leaving the market, applications becoming more demanding, policy coverage shrinking and premiums hitting record levels, a rising number of law firms are deciding to forgo insurance altogether.

Of course, many firms are staying the course, regarding cyber insurance as another unavoidable cost of doing business. But whether they’re aware of the full extent of this cost—especially amid growing legal battles over what such policies even cover—is another question entirely.