Barack Obama actually said...
the Executive order (EO) is only a first step in addressing the threat and not a substitute for actual legislation.
Context
Obama emphasized the need for legislation beyond the Executive order for cybersecurity.
06/11/2013