14
zLiability
yMay need civil as well as criminal liability, to allow victims to recover losses from parties guilty of negligence or misconduct
yMay need tort law as well as contract law – is there a legal duty on the part of a company to secure its CII?
yStandards, best practices, and audits:  improve security, and provide a defense
yCurrent patchwork of regulations must be regularized