"The bill will create a temporary reduction in attack surface by reducing some of the most obvious glaring system misconfigurations and weak password policy issues," says Chris Morales, head of analytics at the security firm Vectra.