good question --- I think the answer is: up to now, governments realised that the process of convincing of private sector is too slow, this is why we are seeing various cybersecurity and cybercrime regulations that aim at private sector being imposed in many countries. This is quite a controversial issue because this drags resources from voluntary investment to cybersecurity and from proactivity to compliance with regulation in a reactive way. But this is indeed the trend of the last 5-6 years.

Source author: Tatiana Tropina tatiana.tropina@gmail.com