> We should regulate and punish, not subsidize. I agree to a point, but to continue the physical-security analogy: while private businesses should not be negli

> We should regulate and punish, not subsidize. I agree to a point, but to continue the physical-security analogy: while private businesses should not be negligent in securing their property, a patrolling police force should also exist to discourage theft and vandalism at large. I think the private and public sector have both been negligent when it comes to cybersecurity. Both need to improve. (Like you, I'm willing to bet the private sector is hoping to sit back and let the taxpayer foot the bill for everything. This is a problem too.)