Cyber insurance not a risk management tool, say banks