Modeling Privacy Insurance Contracts and Their Utilization in Risk Management for ICT Firms