A broker's warning: falling cyber rates mask stricter underwriting, while Colorado's 30-day breach-notice law leaves sma...