The action items are targeted at cyber-risk modellers, cyber-CAT bond investors, regulators, and bond-selling (re-)insurers