There is growing evidence that the private sector cannot adequately respond to state-sponsored cyber attacks and that government intervention is needed. Yet it may be that government regulation would hurt economic competitiveness while providing few benefits. This panel will explore technical, legal, economic and political factors in assessing whether cybersecurity regulation is needed.