The laws will focus on threat detection, incident response, and service certification.