Right now, the U.S. House is debating HR1, "Implementing the 9/11 Commission Recommendations Act of 2007." Some news outlets (Fox) have noted that HR1 will require private companies to prepare for terrorism. From a quick reading of Title XI of the bill, "Private Sector Preparedness," I would say "require" may be a strong word. In its current form, the bill seems to be after only voluntary preparedness standards. But however this bill turns out, it's something you're going to want to keep an eye on. You can read the text of the bill in its original form at http://thomas.loc.gov. Search for HR1.