It’s amazing what the carrot of $20 million in incentives—or the stick of millions in potential fines—can do for an IT-security standard.

It’s amazing what the carrot of $20 million in incentives—or the stick of millions in potential fines—can do for an IT-security standard.