Endpoint detection and response has moved from a security nice-to-have to a cyber insurance prerequisite. Here is why insurers now insist on it.