NAIC adopts model law on cybersecurity: Will states adopt it?