,,ii ,cal5d> ,no4 #ij #aai? ,,congress  
#a/ ,session  ,s4 #bde ,report ,no4     
#aai-bh ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ 
,,/ates  ,janu>y #bd1 #bjbe,mr4         
,hick5loop] 7= himself & ,mrs4 ,capito7 
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation    
,june #i1 #bjbe,report$ by ,mr4 ,cruz1  
)\t am5dm5t  ,a ,,bill  ,to require !   
,assi/ant ,secret>y ( ,comm]ce =        
,communications & ,in=mation to e/abli% 
a work+ gr\p on cyb] insurance1 to      
require dissem9ation ( in=mative        
res\rces = issu]s & cu/om]s ( cyb]      
insurance1 & = o!r purposes4  #a4 ,%ort 
title ,?is ,act may be cit$ z ! ,insure 
,cyb]security ,act ( #bjbe4  #b4        
,def9itions ,9 ?is ,act3 7#a7 ,assi/ant 
,secret>y ,! t]m ,assi/ant ,secret>y    
means ! ,assi/ant ,secret>y ( ,comm]ce =
 ,communications & ,in=mation4  7#b7    
,critical infra/ructure ,! t]m critical 
infra/ructure has ! mean+ giv5 ! t]m 9  
subsection 7e7 ( ! ,critical            

,infra/ructures ,protection ,act ( #bjja
 7#db ,u4,s4,c4 #eaie;c74  7#c7 ,cu/om] 
,! t]m cu/om] means an individual or    
organization t pur*ases cyb] insurance f
 an issu]4  7#d7 ,cyb] incid5t ,! t]m   
cyb] incid5t has ! mean+ giv5 ! t]m     
incid5t 9 section #ceeb7;b7 ( title #dd1
 ,unit$ ,/ates ,code4  7#e7 ,cyb]       
insurance ,subject to section           
#c7;c77#a77;,a71 ! t]m cyb] insurance   
means an insurance policy t includes    
cov]age = losses1 damages1 & co/s       
incurr$ due to cyb] incid5ts4  7#f7     
,issu] ,! t]m issu] means an            
organization t issues cyb] insurance4   
7#g7 ,policy ,! t]m policy means a      
policy = cyb] insurance4  7#h7 ,small   
bus9ess ,! t]m small bus9ess has ! mean+
 giv5 ! t]m small bus9ess conc]n 9      
section #c ( ! ,small ,bus9ess ,act 7#ae
 ,u4,s4,c4 #fcb74  7#i7 ,work+ gr\p ,!  
t]m work+ gr\p means ! work+ gr\p       
e/abli%$ "u section #c7;a74  #c4 ,work+ 
gr\p on cyb] insurance  7a7 ,e/abli%m5t 
,n lat] ?an #ij days aft] ! date (      

enactm5t ( ?is ,act1 ! ,assi/ant        
,secret>y %all e/abli% a work+ gr\p on  
cyb] insurance4  7b7 ,composition  7#a7 
,memb]%ip ,! work+ gr\p %all be compos$ 
( ! foll[+ memb]s3 7,a7 ,n less ?an #a  
memb] f ea* ( ! foll[+3 7i7 ,!          
,cyb]security & ,infra/ructure ,security
 ,ag5cy4  7ii7 ,! ,national ,in/itute ( 
,/&>ds & ,te*nology4  7iii7 ,! ,dep>tm5t
 ( ! ,treasury4  7iv7 ,! ,dep>tm5t (    
,ju/ice4  7v7 ,! ,f$]al ,trade          
,commission4  7,b7 ,n less ?an #a ,/ate 
insurance regulator ) exp]tise reg>d+   
cyb]security & cyb] insurance4  7#b7    
,*airp]son ,! ,assi/ant ,secret>y %all  
be ! *airp]son ( ! work+ gr\p4  7c7     
,activities  7#a7 ,9 g5]al ,! work+ gr\p
 %all c>ry out ! foll[+ activities3 7,a7
 ,= ! purposes ( ! activities ( ! work+ 
gr\p1 def9e ! t]m cyb] insurance 9 a    
mann] t is diff]5t f ! def9ition ( t t]m
 "u section #b7e71 if ! work+ gr\p      
det]m9es t su* a modifi$ def9ition is   
necess>y4  7,b7 ,analyze & expla9 9 a   
mann] und]/&able to cu/om]s ! te*nical &

 legal t]m9ology commonly us$ 9         
policies4  7,c7 ,analyze & expla9 9 a   
mann] und]/&able to cu/om]s h[          
provisions 9 policies correspond to     
common types ( cyb] incid5ts1 includ+ ^?
 involv+ ransomw>e4  7,d7 ,analyze &    
expla9 9 a mann] und]/&able to cu/om]s  
h[ provisions 9 policies correspond to  
common cu/om] responses to cyb]         
incid5ts1 includ+ ) respect to sy/em    
recov]y & pot5tial ransom paym5ts4  7,e7
 ,analyze & expla9 9 a mann] und]/&able 
to cu/om]s ! t]m9ology us$ 9 policies to
 include or exclude cov]age = losses due
 to cyb] incid5ts4  7,f7 ,analyze &     
expla9 9 a mann] und]/&able to cu/om]s !
 con/ra9ts fac$ by issu]s 9 cov]+ high] 
am\nts ( losses & cyb] risk areas1 su* z
 reputational damage & ! loss (         
intellectual prop]ty4  7,g7 ,develop    
in=mation = cu/om]s on ways to          
effectively evaluate ! types & levels ( 
cov]age (f]$ "u a policy4  7,h7 ,develop
 in=mation = issu]s1 ag5ts1 & brok]s    
reg>d+ h[ to provide & communicate      

policy provisions t are cle> & easy to  
und]/& = cu/om]s4  7,i7 ,ga!r input f   
issu]s on :at measures c\ld improve !   
ability ( ^? issu]s to (f] additional   
cov]age "u policies1 includ+-- 7i7      
improvem5ts to _! actu>ial data & cyb]  
risk data2  7ii7 ! developm5t (         
effective in=mation %>+ me*anisms2 &    
7iii7 accurate measurem5t ( !           
cyb]security practices ( cu/om]s4  7,j7 
,id5tify :at measures c\ld r$uce ! co/ (
 policies & r$uce ! am\nt ( cyb] risk & 
! numb] ( cyb] incid5ts4  7,k7 ,develop 
recomm5dations = cu/om]s on h[ be/ to   
use cyb] insurance & ! b5efits ( do+ s4 
7#b7 ,consultation ,9 c>ry+ out !       
activities ( ! work+ gr\p "u p>agraph   
7#a71 ! work+ gr\p %all consult ) !     
public 9 an op5 & transp>5t mann]1      
includ+ by consult+ ) ! foll[+          
/akehold]s3 7,a7 ,issu]s4  7,b7         
,insurance ag5ts & brok]s ) exp]i5ce 9 !
 sale & di/ribution ( cyb] insurance4   
7,c7 ,repres5tatives ( bus9ess cu/om]s f
 multiple sectors & repres5tatives (    

small bus9esses4  7,d7 ,academia4  7,e7 
,/ate insurance regulators ) exp]tise   
reg>d+ cyb]security & cyb] insurance4   
7,f7 ,own]s & op]ators ( critical       
infra/ructure4  7,g7 ,o!r individuals or
 entities ) cyb]security & cyb]         
insurance exp]tise z ! ,assi/ant        
,secret>y consid]s appropriate4  7d7    
,report ,n lat] ?an #a ye> aft] ! date  
on :i* ! work+ gr\p fir/ conv5es1 !     
work+ gr\p %all submit to ,congress a   
report reg>d+ ! activities ( ! work+    
gr\p "u subsection 7c7 & any            
recomm5dations ( ! work+ gr\p4  7e7     
,t]m9ation ,! work+ gr\p %all t]m9ate ^u
 submission ( ! report requir$ "u       
subsection 7d74  7f7 ,rule ( con/ruction
 ,no?+ 9 ?is section %all be con/ru$    
to-- 7#a7 require adoption ( !          
recomm5dations ( ! work+ gr\p2 or  7#b7 
provide any au?ority to any memb] ( !   
work+ gr\p or any o!r individual to     
regulate ! bus9ess ( insurance t is n   
already provid$ "u any o!r provision (  
law4  #d4 ,dissem9ation ( in=mative     

res\rces = cyb] insurance /akehold]s    
7a7 ,9 g5]al ,n lat] ?an #ij days aft] !
 date on :i* ! work+ gr\p submits !     
report requir$ "u section #c7;d71 !     
,assi/ant ,secret>y %all dissem9ate &   
make publicly available in=mative       
res\rces = cyb] insurance /akehold]s4   
7b7 ,requirem5ts ,! ,assi/ant ,secret>y 
%all ensure t ! res\rces dissem9at$ "u  
subsection 7a7-- 7#a7 incorporate !     
recomm5dations includ$ 9 ! report       
submitt$ "u section #c7;d72  7#b7 are   
g5]ally applicable & usable by a wide   
range ( cyb] insurance /akehold]s1      
includ+ issu]s1 ag5ts1 brok]s1 &        
cu/om]s2 &  7#c7 include case /udies &  
specific examples1 :]e appropriate4  7c7
 ,publication ,! res\rces dissem9at$ "u 
subsection 7a7 %all be publi%$ on !     
public website ( ! ,national            
,telecommunications & ,in=mation        
,adm9i/ration4  7d7 ,outrea* ,!         
,assi/ant ,secret>y %all conduct outrea*
 & coord9ation activities to promote !  
availability ( ! res\rces dissem9at$ "u 

subsection 7a7 to relevant indu/ry      
/akehold]s & ! g5]al public4  7e7       
,volunt>y use ,no?+ 9 ?is section may be
 con/ru$ to require ! use ( ! res\rces  
dissem9at$ "u subsection 7a74  ,june #i1
 #bjbe,report$ )\t am5dm5t