What we need to do is we need to create new international standards of behavior - not just national laws, because this is a global problem. We can't just fix it in the United States, because there are other countries that don't follow U.S. laws. We have to create international standards that say that cyber attacks should only ever occur when it is absolutely necessary.
