James Button

London

Consultant

Yes - but, please effective penalties for not protecting their systems, as well as for those attacking systems.

If you cannot show that you took reasonable precautions to ensure your computer system is secure, then you should be liable (1 count perhaps, against several thousand counts for trojan distributers)

If you collect data as part of your business, and don't protect it - then you should be punished, rather than those taking that data from your systems.

If your business is selling systems or software, then you should be punished if that software, or systems are not secure when sold.

Additionally, if your job is to enforce the proper, accurate maintenance and security of systems and data, and you don't do the job properly/effectively - then you should also be liable

(Bill G, when you gonna be visiting the UK ?)