Trouble distributing cyber-risk policies