How to make organizations care about anything? Show them the cost. Cybersecurity insurance can be a compelling driver of change.
GDPR forced organizations into rapid action mode due to the real possibility of hefty fines - hefty enough to make a dent in their financials. Similarly, the cost of Cybersecurity insurance might prove to be a strong driver of cybersecurity efforts at the organizational level.
The critical nature of cybersecurity risks related to business continuity in itself should have been enough to make enterprises take rapid action. But so often, it's far more easier to take action when you are given a pricing quote which shocks you. The shock value. Cybersecurity insurance could be just that kind of a propellant.
Insurance will require audits and compliance - and that's usually how changes get made in large organizations/industries.