Optimisation of cyber insurance coverage with selection of cost effective security controls