Lieberman said the President already has the authority to issue an executive order that will establish cybersecurity standards for 18 critical infrastructure sectors and requires that those standards be implemented in certain already-regulated areas, and he noted that a draft of order is already being circulated.
However, legislation would be needed to offer private-sector owners liability protection for voluntarily adopting cybersecurity practices developed jointly by the private sector and the government.
Legislation also would be required to allow private companies to share cybersecurity threat information amongst themselves and with the government.
