Companies that suffer cyberattacks can expect not sympathy but scrutiny from legal authorities. The authors of this article discuss how strategic negotiation of directors and officers, errors and omissions, and cyber insurance policy language can cover not only litigation but also investigation costs and help to mitigate any cyber claims that may arise.