I don't have a particular recommendation other than that we base decisions on as much hard data as possible. We need to carefully look at all the options and all their ramifications in making our decisions.

Everyone is a proponent of strong encryption.

If we take as given that critical infrastructures are vulnerable to a cyber terrorist attack, then the question becomes whether there are actors with the capability and motivation to carry out such an operation.

We have never really had absolute privacy with our records or our electronic communications - government agencies have always been able to gain access with appropriate court orders.

I think most organizations have an interest in key recovery, at least with respect to stored data.

I don't have a particular recommendation other than that we base decisions on as much hard data as possible. We need to carefully look at all the options and all their ramifications in making our decisions.

While the vast majority of hackers may be disinclined towards violence, it would only take a few to turn cyber terrorism into reality.