Attackers automate. They do not care whether you have 5 employees or 500; they care whether your email account can be taken over and used to send a fake invoice. That single scenario, funds transfer fraud, is the most common cyber claim among small businesses.
A cyber policy covers breach response, extortion, lost income and liability. Carriers price it largely on two questions: do you use multi-factor authentication, and do you have backups that are tested.
This article is general information, not advice about your policy. Coverage depends on the policy and carrier. Questions? Call 708-303-6666.