So, let's think about the limitations of mandatory regulations. A review of publicly available information shows that there's mixed resistance to mandated government frameworks and policies. Different countries approach that differently. Not all frameworks and regulations that exist align well with each other, even within a country. • The number of enforced cyber and physical security regulations is growing. • Some nation-states may have cybersecurity strategies that are still evolving. • Public-private partnerships are lacking in some countries and sectors. • Then we have the sector-specific cybersecurity plans that the governments may be putting out. Here in the United States, we actually have 16 different sectors, like chemical, water, electric, and even hospitals and financial banks. • Regulation compliance is mandatory, while standards compliance is voluntary. • But there is one general agreement across all the nations. No country or government can address cybersecurity risk in isolation. Remember we talked about the fact that malware has no borders. IC32M Page 78