Despite having cyber insurance and claiming to follow IT standards, the company was locked out of its systems and unable to continue operations.