Congress has been struggling with cyber security issues for several years, most recently in connection with the Cybersecurity Act of 2012 (CSA2012).

CSA2012 is an attempt to protect the nation’s critical infrastructure from cybersecurity risks. The initial version of the bill attempted to do so by first identifying critical infrastructure, then requiring owners and operators of such assets to meet cybersecurity performance requirements.

But objections raised by privacy advocates led to a revised bill (S. 3414), which relies on voluntary private sector compliance with cybersecurity standards. [InsidePrivacy]