Lawmakers mull cyber insurance for small businesses