“As a private-sector CEO, whenever you hear the term regulation, you have to twitch and say, ‘No, not that.’ That’s the default answer out of the gates,” he said. “But…here’s the facts. I think regulated industries ordinarily, when they’re regulated in regard to the cybersecurity risk, probably are better defended.”