What useful `cybersecurity' legislation could you possibly pass? The only thing I can think of is "do not connect x, y, and z systems to the internet," but that

What useful `cybersecurity' legislation could you possibly pass? The only thing I can think of is "do not connect x, y, and z systems to the internet," but that still leaves plenty of ground.