that meant using regulation to force private utilities, pipeline operators, and water treatment plants to beef up their security, so be it, Chertoff said. He’d overseen the government’s response to Hurricane Katrina and could see that the United States now faced a cyber threat on U.S. infrastructure that would be just as dire—if not worse.

