“We’ve had a decade or more for industry to do voluntary [cyber] standards and it hasn’t emerged,” Michael Daniel, White House cyber coordinator during the Obama administration, told me. “So I think the government saying, ‘Look, we’ve got to get serious about this, and either you guys need to do it or we have to look at mandatory approaches,’ is an appropriate place to be.”