I agree we don't need more legislation, and that perhaps the real draw for companies here is liability exclusion, but, I think it's going a little far to say th

I agree we don't need more legislation, and that perhaps the real draw for companies here is liability exclusion, but, I think it's going a little far to say that cyber attacks are "fear propaganda". They certainly do exist and occur every day. For every 4 or 5 serious breaches we hear about there's most likely 100 more we don't. They also do real economic damage. I personally don't put them in the same category as security theater and other fear mongering.