How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies.

They should provide guidance, but I’m not sure we really want the NSA inside of networks more than they already are.

If voters and CEOs don’t want to spend the money required to secure their infrastructure, that’s on them.

> How is it NSA/DHS negligence? Neither is responsible for securing the infrastructure of state and local governments nor private companies.

It is not a duty nor their responsibility. It is however bad for nation overall if companies don't dedicate some resources to security, so a sane administration will do something to advocate for it.