Sec. 9005. GAO STUDY OF CYBERSECURITY INSURANCE

185 words·~1 min read·/statute-compilations/comps-16736/sec-9005

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 9005 GAO STUDY OF CYBERSECURITY INSURANCE ###

(a)Study The Comptroller General of the United States shall conduct a study to assess and analyze the state and availability of insurance coverage in the United States for cybersecurity risks, including by— ####

(1)identifying the number and dollar volume of cyber insurance policies currently in force and the percentage of businesses, and specifically small businesses, that have cyber insurance coverage; ####

(2)assessing the extent to which States have established minimum standards for the scope of cyber insurance policies; and ####

(3)identifying any barriers to modeling and underwriting cybersecurity risks. ###

(b)Report Not later than 180 days after the date of the enactment of this Act, the Comptroller General shall submit to Congress a report setting forth the findings and conclusions of the study conducted under subsection (a), including— ####

(1)recommendations on whether intervention by the Federal Government would help facilitate the growth and development of insurers offering coverage for cybersecurity risks; and ####

(2)a discussion of the availability and affordability of such coverage and policyholder education regarding such coverage.