Plain-language articles on what insurers, customers and regulators ask you to prove, what security work costs, and what to do about it.