The Cybersecurity Act of 2012 aims to give the Department of Homeland Security the power to mandate the security level in industries deemed as critical infrastructure. CISO: “The biggest area where the government can improve security is by driving the software and IT companies to develop more secure products” The bill authors put all the pain on the end user in the hope that that’ll drive the change, but you typically end up breeding this culture of compliance where end users try to argue that they don’t have any critical assets, or they’ll downplay the criticality of the data and systems they have””]
Source: https://www.csoonline.com/article/2130818/industry-on-cybersecurity-act-of-2012–not-so-fast.html