James Lewis actually said...

But the ultimate test will be: Do you give the Government more authority to mandate security, to protect critical infrastructure facilities?

the most important step that we are not taking is thinking about how to deal with the issues of critical infrastructure vulnerability.

getting people to have a better understanding of what is connected to the internet, how it connects, and who can use it, these are all thing...

This was tried in the Clinton administration. It did not work then, it does not work now.