Legal Frameworks --- I can see your point and I can follow your thought process. HOwever, this is the biggest challenge that everyone looks towards the state for legal frameworks and cyber solutions. You do not always need cyber solutions, there are many laws in place that regulate the private industries (risk management of techincl infrastructures) and they are bound to those laws. So the 90% that you are talking about must follow certain rules and regulations. After a cyber atatck many of these laws apply as this is part of the ripple effect. e.g. there are stringent rules for the automobile industry (see TISAX certification).The state must regulate all that falls within its jurisdiction including CI. All others must also develop NMCS and legal frameworks.

Source author: Stefanie Frey stefanie.frey@deutor.de