The federal government would persuade companies to join by treating "participation in the institute -- and satisfactory performance evaluations -- as equivalent to adopting the cybersecurity cramework to the extent adoption of the framework is required to be eligible for particular government programs or incentives going forward," the authors write.