About as many Republicans say government should require security standards as say it should avoid the issue entirely. Democrats are split on the matter as well.
The results reflect a degree of nuance not found on Capitol Hill, where lawmakers are considering a bill, backed by the White House, that would require industries to meet specific cybersecurity standards to protect their systems from attack. Democrats largely support the bill; most Republicans oppose it, saying it would add burdensome regulations that would stifle innovation.
The Obama administration has pushed hard to get Congress to move on legislation. Officials recently walked lawmakers through a mock computer attack on the electrical grid in New York City during a summer heat wave to demonstrate the risks of inaction.
Leon Panetta, now defense secretary, warned when he was CIA director that “the next Pearl Harbor that we confront could very well be a cyberattack.”
FBI Director Robert S. Mueller III has said cyberattacks probably will overtake terrorism as the major threat facing the United States.
National Security Agency Director Keith Alexander, who also heads the U.S. Cyber Command, has said that “a purely voluntary and market-driven system is not sufficient” to protect critical networks.
Some experts say that only an actual cyberattack shutting down an electrical grid or Wall Street, for example, will prompt action.
“We will talk and we will debate, but we will not act,” said Mike McConnell, a former director of national intelligence and former NSA director. “It will take a catastrophic event to galvanize the government and the public to require higher cybersecurity standards to protect the nation.”
According to the poll, 39 percent of Americans favor a government mandate, 28 percent say government should encourage but not require standards, and 26 percent say the government should stay out of the issue.
The survey also found that Americans are divided on whether Congress should pass legislation that would make it easier for the government and the private sector to exchange data about security threats in cyberspace if the exchange could involve content from people’s e-mail and Internet activity.
In the poll, 46 percent of Americans say they believe an information exchange between U.S. companies and the government is justified if it helps thwart cyberattacks, even if it could encroach on personal privacy. About as many, 43 percent, say such an exchange is not justified.
If such legislation includes protections against the release of names and other identifying information from e-mail and other Internet content, support jumps to 65 percent for a system in which companies share cyberthreat data with government officials. The House passed a data-sharing bill, but the White House has threatened to veto it over privacy and other concerns.