John Katko actually said...
However, the reality is that commercial private-sector entities cannot practically be expected to defend themselves against nation-state attacks in cyber space.
Context
Katko emphasizes the vulnerability of private-sector entities to nation-state cyber attacks.
03/21/2017