Much of the digital infrastructure of the twenty-first century is owned and run by private companies. This means that the sites of attack are privately controlled; and it means that identifying, responding to and recovering from an attack will often fall to private corporations.
