Another idea would be to require breaches to be made public. And of course, the government coordinating with good companies a series of best practices and mode

Another idea would be to require breaches to be made public. And of course, the government coordinating with good companies a series of best practices and models, and working with MS, even Linux versions to help get the message out and implement good policy. Like a 'tiered strategy' for home, small biz., mid biz. and 'high touch enterprise'. Basically some kind of 'board' that exist to help train, coordinate and communicate the things that need to be done.