Internet Security Alliance suggests giving businesses incentives and not regulating them will better safeguard IT systems. Cybersecurity is an enterprise-wide risk management that must be understood as much for its economic perspective as for its technical issues, the ISA report says. Government could increase the value of security in the contracts it awards to the private sector. Cyber insurance, if more broadly employed, could provide a set of uniform and constantly improving standards for corporations to adopt and to be measured against, all while simultaneously transferring a portion of risk to the federal government.”]
Source: https://www.govinfosecurity.com/group-offers-alternative-to-cyber-regulations-a-1980