Cyber insurance for financial services firms has to layer on top of bank bonds and crime coverage, since those instruments were never built for modern cyber risk.