Not sure what you're getting at. We already have a bunch of laws and regulations. And misreporting your cybersecurity is already securities fraud! https://www.sec.gov/newsroom/press-releases/2023-227