Two reports on cyber cover warn there is more to be done by insurers