Six companies signed a safety pact covering hacking and biological threats, with no penalties or deadline for putting the checks in place.