Insurer Hiscox focuses on areas like cyber-attack and terrorism, but how do you assess such risks?