Yes, we desperately need broad but appropriate regulatory standards. Especially, security standards and research should focus on securing infrastructure and infrastructure type resources. The hacked water supply article from just a few days ago was shocking even to cynical me.

Things like institutes that study this situation outside the government itself may be necessary to establish trust at this point.

And you can't make the standards primarily about software vendors.