New voluntary code of practice for technology providers defines a market baseline for cyber security.