Compliance acts as primary driver for obtaining cyber insurance, but budget constraints hinder efforts.