Cyber Insurance: Action Needed to Assess Potential Federal Response to Catastrophic Attacks (Government Accountability Office)