Cybersecurity is a national security problem that requires more government involvement, not less, says James Lewis. He says the industry-knows-best approach to IT security is a dated concept from an earlier era. The Internet Security Alliance’s Larry Clinton says regulation is so last century and other factors such as economics play a more vital role in securing critical IT. Lewis: “Companies will not provide cybersecurity adequate for national security on a voluntary basis. There is no disagreement that burdensome regulation should be avoided on voluntary or widely accepted practices””]
Source: https://www.cuinfosecurity.com/blogs/cyber-regulation-lost-in-time-machine-p-1190