There are three things you can do with risk: accept it, manage it, or transfer it. The second session in the Johns Hopkins University’s 7th Annual Virtual Cybersecurity Conference took up the latter two, as experts described how to reduce risk and how to arrange insurance that covers it.