New law would require computer security audits, status reports - Computerworld

This would change some attitudes:

New law would require computer security audits, status reports - Computerworld: " WASHINGTON -- New legislation being drafted in the U.S. House of Representatives, which could be introduced as early as next week, would require all publicly traded companies to conduct independent computer security assessments and report the results yearly in their annual reports. "

From ComputerWorld