The Insure Cybersecurity Act of 2025 asks the federal government to help make cyber insurance easier to understand. Right now, when companies and organizations buy insurance to protect themselves against cyberattacks, the policies can be confusing and hard to compare. This bill creates a working group that will figure out what's causing problems in the cyber insurance market and then create helpful guides for both customers and insurance companies.

The working group will focus on three main things: First, they'll create materials to help customers understand and compare different cyber insurance policies so they can make better choices. Second, they'll help insurance companies explain their policies more clearly to customers. Third, they'll translate the confusing jargon used in cyber insurance into plain English—explaining things like what "ransomware coverage" actually means, how different policy rules apply to real cyberattacks, and why insurance companies sometimes won't cover certain types of losses like damage to a company's reputation or stolen trade secrets.

Once the working group finishes their work, the government will publish and share all these helpful resources with anyone involved in cyber insurance—whether they're buying it, selling it, or just trying to understand it. The goal is to make the cyber insurance market work better by clearing up confusion and helping everyone make more informed decisions.

Insure Cybersecurity Act of 2025

Hickenlooper, John W.

Insure Cybersecurity Act of 2025This bill requires the National Telecommunications and Information Administration (NTIA) to establish a working group on cyber insurance policies. Under the bill, these are defined as policies that offer coverage for losses, damages, and costs incurred due to cyberattacks and related incidents.The working group is directed to analyze and address issues in the cyber insurance market facing both insurers and their customers. Specifically, the working group must develop information for customers on how to effectively evaluate policy options, and for insurers on how to clearly communicate with customers regarding policy provisions.Additionally, the working group is directed to analyze and explain in layman’s terms<ul><li>terminology commonly used in cyber insurance policies, including terminology used to include or exclude coverage for losses from cyber incidents;</li><li>how common policy provisions correspond to cyber incidents and potential responses, including ransomware and potential ransom payments; and</li><li>constraints faced by insurers&nbsp;in covering higher losses in cyber risk areas, such as reputational damage and loss of&nbsp;intellectual property.</li></ul>At the conclusion of the working group's term, NTIA must publish and disseminate informative resources for cyber insurance stakeholders, including any recommendations formulated by the working group.&nbsp;&nbsp;