The Insure Cybersecurity Act of 2025 requires the Assistant Secretary of Commerce for Communications and Information to establish a working group on cyber insurance within 90 days of enactment. This group will be chaired by the Assistant Secretary and include members from key federal agencies like the Cybersecurity and Infrastructure Security Agency, National Institute of Standards and Technology, and the Department of the Treasury, along with State insurance regulators. The working group's primary activities involve analyzing and explaining complex cyber insurance policy terminology, coverage for various cyber incidents (including ransomware), and exclusions in a manner understandable to customers. It will also develop information to help customers evaluate coverage and assist issuers, agents, and brokers in communicating policy provisions clearly. Furthermore, the group will gather input from issuers on improving coverage, identify measures to reduce policy costs and cyber risks, and develop recommendations for customers on effectively utilizing cyber insurance. The working group is mandated to consult with a broad range of stakeholders, including issuers, brokers, business customers, small businesses, academia, and critical infrastructure owners. Within one year of its first meeting, the group must submit a report to Congress detailing its activities and recommendations. Subsequently, the Assistant Secretary will disseminate and publicly publish informative resources based on this report, ensuring they are applicable to a wide range of stakeholders and include case studies, with outreach efforts to promote their availability.
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Committee on Commerce, Science, and Transportation. Ordered to be reported without amendment favorably.
Committee on Commerce, Science, and Transportation. Reported by Senator Cruz without amendment. With written report No. 119-28.
Placed on Senate Legislative Calendar under General Orders. Calendar No. 90.
Science, Technology, Communications
Advisory bodiesComputers and information technologyComputer security and identity theftCongressional oversightConsumer affairsGovernment information and archivesGovernment studies and investigationsInsurance industry and regulationPublic-private cooperation
Insure Cybersecurity Act of 2025
USA119th CongressS-245| Senate
| Updated: 6/9/2025
The Insure Cybersecurity Act of 2025 requires the Assistant Secretary of Commerce for Communications and Information to establish a working group on cyber insurance within 90 days of enactment. This group will be chaired by the Assistant Secretary and include members from key federal agencies like the Cybersecurity and Infrastructure Security Agency, National Institute of Standards and Technology, and the Department of the Treasury, along with State insurance regulators. The working group's primary activities involve analyzing and explaining complex cyber insurance policy terminology, coverage for various cyber incidents (including ransomware), and exclusions in a manner understandable to customers. It will also develop information to help customers evaluate coverage and assist issuers, agents, and brokers in communicating policy provisions clearly. Furthermore, the group will gather input from issuers on improving coverage, identify measures to reduce policy costs and cyber risks, and develop recommendations for customers on effectively utilizing cyber insurance. The working group is mandated to consult with a broad range of stakeholders, including issuers, brokers, business customers, small businesses, academia, and critical infrastructure owners. Within one year of its first meeting, the group must submit a report to Congress detailing its activities and recommendations. Subsequently, the Assistant Secretary will disseminate and publicly publish informative resources based on this report, ensuring they are applicable to a wide range of stakeholders and include case studies, with outreach efforts to promote their availability.
Advisory bodiesComputers and information technologyComputer security and identity theftCongressional oversightConsumer affairsGovernment information and archivesGovernment studies and investigationsInsurance industry and regulationPublic-private cooperation