Ron Johnson

Yes, I will be the first to admit here that almost everything here in government is well intentioned, but there are some very serious negative unintended consequences.

I just want to try and drill down some numbers.

Health insurance companies must be accountable to consumers.

I mean, literally what are we talking about in terms of the level of flexibility we are going to need if we are going to have any hope?

I guess the other thing I want to get to is some sort of Federal preemption on data breach, so that we have a data breach standard.

The first step that we need to take in terms of cybersecurity is information sharing.

I come from a manufacturing background, so we have gone through ISO certification.

I want you to kind of answer the question I asked Mr. Spiezle about the enormous incentives you have.

Because here is my concern, is that we enact some piece of legislation with the best of intentions that actually makes it more difficult.

Is there a role the government can play that does not actually do more harm than good?

So would that require more regulation of the banking industry, some targeted actions there?

Do you deny the fact that Google and Yahoo! have an enormous free market incentive to make sure that this criminal activity does not occur on the networks?

You really do not think Yahoo! or Google have an enormous financial incentive to try and police this stuff and prevent it from happening?

But I want to make sure it is a cooperative one, not potentially somebody who is set up in business and is actually hostile to some of the actors in the room.

So you are actually talking about enforcement; you are talking about going after criminals and enforcing and penalizing the criminals.

Doesn't Yahoo! and Google, don't they have enormous financial incentives to try and police this and prevent malvertising and malware?

Well, even non-unionized workers have recourse through the courts, and that is the problem I am having with the regulations requiring that.

I would think that would be a natural coordination between ISO certification and then also the insurance market.

In other words, that is something you really have not considered yet, you have not really----

I will just reinforce the point that you have literally thousands of private sector inspectors out there that can help you out.

From my standpoint, I would love to see, again, the government contact ISO certification companies.

I am new to this issue. Are there penalties for noncompliance?

But you have the power to do that?

I am talking about accountability up front to maintain and keep the process in control.

We need to work hard with the Congress and the President to make sure it does not.