Mainstream insurance industry practices have adopted Value-at-Risk (VaR) from global financial industry as the pre-dominant cyber insurance model being oblivious to both distinguishing characteristics of cyber-risks as well as statistical properties of VaR. Such widespread misapplication of VaR...