US firms get together to ensure cyber security ratings present the right image, especially to the market.