Federal contractors fear a watchdog report on the government’s role facilitating coverage of cybersecurity risks—included in the House-passed National Defense Authorization Act—will lead to a mandate that their companies hold related insurance policies.

The provision—Sec. 1710A—does not require contractors to have cyber insurance policies, but it is grouped together with a number of other proposals around cyber threat hunting and intelligence sharing based on recommendations of the Cyberspace Solarium Commission.

Now, the commission’s lawmakers are trying to get as many of its recommendations as possible to survive conference negotiations and make it into the final annual defense authorization bill, Nextgov reported. 

Brian Finch, a partner at Pillsbury who helps companies negotiate policy terms and claims with insurance companies, said he is agnostic about a mandate for federal contractors, but is largely supportive of the solarium commission’s recommendations.

“More data is critical, especially as ransomware incidents skyrocket and insurance policies are invoked more regularly,” Finch said.  “It would be great to have more insight into that kind of data to better understand the risks as well as the efficacy of various cybersecurity measures.”

Read the full article here.