However, Rosenzweig believes the government's approach through frameworks and legislation is wrong. He favors a non-regulatory strategy that would include information sharing, creation of a civil liability regime, better education, more international engagement and a methodology for certifying hardware components.
"For me, the government shouldn't be responsible for creating the framework," said Rosenzweig, who is also a visiting fellow at The Heritage Foundation, a conservative think tank.
Instead, Rosenzweig favors a private sector institution building a framework that is based on common law and is a "product of the market, not of a government fiat."
Sign up for CIO Asia eNewsletters.