Whether or not this statistic is accurate, certainly a large percentage is in private hands, and this does have security implications. Nationalization is not t

Whether or not this statistic is accurate, certainly a large percentage is in private hands, and this does have security implications. Nationalization is not the only possible way to harden security. But we could designate certain key industries as of importance for national security, and thus restrict ownership of it to US citizens only. Insurance is a key private-sector approach to managing risk, and in an ideal world the insurance companies would enforce their own requirements in regards to security audits, penetration testing, and the like. And failing them would ideally cause premiums to rise. Making such insurance mandatory would be key, in the same way it is mandatory for drivers. This industry is currently immature, partly because of the low demand, and making it mandatory would help correct that. And such insurance would itself be an industry designated to be of importance to national security, along with all related cybersecurity services. A lot of government-run infrastructure at the state, regional, and municipal level is vulnerable in the exact same manner, and having either insurance coverage and/or federal-level assistance is key. Everything from voting systems to municipal water systems are extremely vulnerable. I know from firsthand that the security practices can be non-existent.