“When you’re asking companies to spend money to keep their lights on, or spend it on cybersecurity, you can guess what wins every time,” said Nathan Sportsman, CEO of security firm Praetorian. “Without offering a tax break for compliance, or [levying] a fine to those who don’t follow it, you’re not going to change behavior.”