The US needs an agency that helps businesses and citizens with security. If China is attacking our citizens we need a national style defense of our business and

The US needs an agency that helps businesses and citizens with security. If China is attacking our citizens we need a national style defense of our business and IP. For example, right now lots of decisions are left up to each company to decide how to best secure data. Equifax is a great example. They were leaving servers unpatched and I think not removing access for former employees. There also needs to be a licensing system for any company or person that is going to have access to PII data for more than 25k people. People in this position need extra training, especially developers. Many developers learn about information security on the job but it should be a formalized training system. We keep seeing the same dumb mistakes being made at companies like leaving databases unsecured or S3 buckets public.