What can organizations do to lower their cyber insurance premium (apart from switching providers)?

Start working with your insurance company and understand what they are looking for in your security program and build it.

They should perform BIA and identify cost associated with critical risk if not mitigated to evaluate the total value of cyber risk based on which they can take the cyber insurance.  There are many other means but the simplest one is to start performing Business Impact Analysis.