To assist in prioritizing threats, we must first assess the risks we face and then manage those risks by putting our resources to work in the most effective manner.
With over 85 percent of U.S. critical infrastructure controlled bythe private sector, the federal government needs to (1) definereasonable actions for the private sector in reducingvulnerabilities in CI, (2) address terrorist-related liabilityissues, and (3) work to harmonize U.S. laws with laws of othercountries so that terrorists and other criminals cannot slipthrough legal gaps.