Insurers compelled to invest in cyber security