For more than a decade, the United States has relied mainly on voluntary action by private companies to protect the nation’s critical cyber infrastructure, but “it’s not working,” a cybersecurity expert told lawmakers.Companies own 85 percent of the critical infrastructure, and they have been unwilling to invest what is needed to protect against cyberattacks, James Lewis, a senior fellow at the Center for Strategic & International Studies, told the Homeland Security cybersecurity subcommittee on Wednesday.
http://www.nextgov.com/nextgov/ng_20110316_8174.php