| > The issue comes down to actual skilled people hours to do the work and resource constraints to do so. It comes down to incentives. If you want broad security you have to do more than hope that every water utility will both hire good people and also allow them to do their jobs properly. > But what does that fundamentally mean for boots on the ground? How does any regulation look on the ground? How does the federal government regulate banks and airports? > these are for the most part, not federal government funded entities nor government controlled even at a state level Neither are banks or airports > What about Energy? Data Centers? Pharma? Energy and pharma are already regulated. Maybe data centers will be eventually if they are deemed sufficiently critical. > Regulation is way too far behind to just instantly drop a silver bullet. I don’t know what this even means in the context of securing our water system. Do you mean to say that regulation can’t ensure that these software systems don’t use default passwords and so on? > And 100% agree that we are witnessing repercussions of leadership that did not have much forethought but that ain’t new and goes back quite a ways especially in CI What is new is that we started a war with a country with a respectable technology competency without doing anything to shore up our defenses. |