I want you to read this tweet:
1. The government is constantly whinging on about how we need more sharing. The private sector elements who actually get involved in sharing regimes constantly complain about how “sharing” with the government is a one-way street. Who are you going to give a sympathetic ear to the next time someone utters the words “public-private partnership?” How much more annoying is it that places like DHS want to borrow private-sector expertise but don’t want to pay for it?
2. What makes this lop-sided relationship really annoying is that the private sector “attack surface” is several metric-*** tons larger than the government one. Who is it that needs more and better intel about cyber threats, exactly?