if you watch the earlier panels come you saw john parlin and chris painter talk about the factors that actuarial data that would enable you to effectively judge what is effective. i think insurance can be important, but we need much more security science, more data about what is happening. and enable to drive the additional security everyone wants. >> i see this play out quite regularly there is usually a claim under cyberinsurance policy. so the cyberinsurance policies are working. the claims are being submitted here to insurance companies paying now. the problem still is referring to is the underwriting industry doesn't know how to handle the entire wall of risk. and so they are underwriting a fairly small portion of the market right now is they don't have underwriting standards as more data comes in. it was developed those underwriting standards and a broader set of insurance, especially with consequential harm will be available. >> we are unfortunately running out of time. one last question. what are two or three things you recommend practically for a company to do right when you g