New law planned to make all businesses assess their risk of terrorist attack.