Even if no mandatory SEC reporting requirements are forthcoming, at the very least, the guidance provides corporations with the opportunity and to ask internally whether they are doing enough to secure their computersystems.
Mr Schneier predicts that insurance companies will start to specify what kinds of computer equipment companies should use, or charge lower premiums to insure more secure operating systems or hardware.