Government-backed reinsurance programs could insure insurance agencies while the industry matures to the point where “cyber insurance” is both affordable and effective. Incentive programs beyond those directly focused on students extend to educational institutions and even investments in startups. Information sharing can be a good thing but few organizations embrace it because they don’t want sensitive information they’ve discovered about bad actors, attack vectors, new malware variants, etc. being released. Instead of implementing fines and penalties, government can become more “operationalized” within every organization’s security posture.”]