When you are the CIO, you deal with things like servers, networks,  firewalls and the like. 

You are not generally called on to deal with  other business related issues such as insurance.  However, with the rash of ransomware attacks and denial-of-service  attacks that have been happening, CIOs are now being asked to help out when the company goes shopping for cyber insurance.  The problem is that cyber insurance is new and it raises more questions  than it answers. 

CIOs need to study this new area if they want to be  able to guide their company correctly.