Steven Daines actually said...

So my question, I guess, is why wasn't there more consultation with industry before the guidance was issued?

I know industry has been working collaboratively to address cyber and published some best practices in July.

Well, let me say this. I spent 28 years in business. I understand aspirational targets, and certainly, we should aspiring to zero.

But there's an old saying, at least coming from business, if you aim at nothing, you'll hit it.