State insurance departments are slow to adopt NAIC model law that would establish basic cybersecurity data standards for insurance brokers and agencies, said Bill Haber, co-founder, business strategy, cybersecurity firm TEKRiSQ.