Warren Supports TRIA Renewal but Calls for Progress on Cyber and NBCR

Support for TRIA Renewal, But Not Without Conditions

Senator Elizabeth Warren has voiced her support for the renewal of the Terrorism Risk Insurance Act (TRIA), a key piece of legislation that provides federal backstop coverage for commercial property and casualty insurers in the event of large-scale terrorist attacks. While she recognizes the importance of maintaining this protection, Warren also pointed out that significant gaps remain in how the insurance industry addresses modern risks, especially cyber threats and national business continuity.

"TRIA has been a cornerstone of our nation's risk management strategy for over a decade," said Senator Warren. "However, as we face new challenges—particularly those related to cyberattacks and disruptions in critical business operations—we must ensure that our insurance framework evolves with the times."

The legislation, originally enacted in 2002 following the September 11 attacks, was designed to provide a federal backstop for insurers, ensuring that catastrophic losses from terrorism do not result in market collapse. The program has been renewed multiple times, most recently in 2020, and is set to expire again in 2025.

Why TRIA Still Matters

TRIA has played a pivotal role in stabilizing the insurance market following major terrorist incidents. It ensures that insurers can continue to offer coverage without facing financial ruin after a large-scale attack. By sharing the risk between the federal government and private insurers, TRIA has prevented the kind of insurance market panic that could have resulted from the 2001 attacks.

Warren's support for its renewal reflects an understanding of this stability function. However, she also noted that reliance on TRIA alone may be a sign of deeper problems within the broader insurance landscape—particularly in how insurers are prepared to handle risks beyond terrorism.

The Cyber Insurance Gap

Cyber risk has emerged as one of the most pressing challenges facing insurers today. With cyberattacks costing businesses billions annually, and many companies still lacking adequate coverage, the lack of a robust federal framework for cyber insurance remains a major concern.

Warren's comments highlight a growing consensus that the current system is insufficient. While private insurers have developed some cyber policies, these often come with significant exclusions or limitations, leaving businesses vulnerable in the event of a breach. She emphasized the need for comprehensive reforms to ensure that businesses can adequately protect themselves against evolving digital threats.

• Cyber risk coverage remains underdeveloped and fragmented
• Insurers lack standardized practices for assessing cyber risks
• Businesses are exposed to massive losses without adequate protection

She advocated for a more proactive federal role in helping to create a framework that would better support the insurance industry in addressing these new types of risk.

National Business Continuity Rule (NBCR) Lacks Progress

Another issue Warren raised is the National Business Continuity Rule (NBCR), a policy designed to ensure that critical infrastructure and essential services can continue operating during and after disruptions. Despite its importance, NBCR has yet to be fully implemented or enforced.

The lack of progress in this area reflects broader challenges within the insurance sector's regulatory environment. Many believe that without a robust NBCR, businesses may not have adequate support systems to manage operational disruptions caused by natural disasters, cyberattacks, or other emergencies.

Warren suggested that the federal government must step up and ensure NBCR is not only finalized but also enforced across all sectors. This would provide businesses with more predictable and resilient frameworks for maintaining operations under stress.

The Broader Implications

Warren's position underscores a critical tension in modern insurance policy: how to balance the need for federal support during large-scale events with the imperative to strengthen resilience at the private-sector level. Her call for action on cyber and NBCR highlights the evolving nature of risk in an increasingly interconnected world.

Insurance regulators, policymakers, and industry leaders must now grapple with how to bridge these gaps. While TRIA renewal is a necessary step, it should not be viewed as a complete solution. Instead, it should serve as a foundation upon which more comprehensive reforms can be built.

"We cannot allow our insurance system to lag behind the risks that threaten our economy," Warren stated. "The future of business resilience depends on proactive policy decisions now."

What Comes Next?

The next few months will be crucial for the future of TRIA and related policies. Congressional deliberations may shape not only the renewal of the terrorism insurance program but also how federal agencies approach emerging risks.

For insurers, this means preparing for more stringent requirements around cyber risk disclosures and potentially new regulatory frameworks that reflect the reality of modern threats. For businesses, it means reassessing their own risk strategies and identifying areas where they may need additional support or coverage.

As the debate continues, one thing is clear: Senator Warren's stance reflects a growing recognition that the insurance sector must evolve to meet new challenges, and that federal leadership will be essential in ensuring that this evolution happens in a timely and effective manner.