Companies, political campaigns and even schools are taking out policies to shield themselves from litigation that can follow attacks