It is interesting that insurers have set the standards for various industries throughout history, cyber security being the latest. There are challenges that individual governments cannot regulate in a coordinated way, but a global insurer can demand specific actions and set the bar for performance.
Brokers play an important role in this process. They educate clients on what insurers demand and best practices for risk management.
Pretty cutting edge for a very old industry.