Implement the controls insurers demand, gather the evidence, and pass your cyber insurance questionnaire.