AISPs and PISPs must, at all times, hold an insurance cover against liabilities arising from cyber security breaches.