Some of the scenarios are over the top (no power for 3 months?) and will probably do more to turn off people that should be paying attention. That said, maybe it takes over the top claims to get attention and then cooler heads can prevail.

I hate to think we have to wait for the next administration or that it is up to the federal government to create incentives for businesses to improve security. Incentives are already in place, too often though, decisions makers do not appreciate the risks they face. Regulations are needed when businesses fail to act on those risks or when the interests of the business run counter to the interests of other stakeholders, like consumers. Regulations have forced businesses to improve security but more is needed, at least with regard to critical infrastructure businesses.

I suspect we'll see more government-industry interaction. NERC has already done this for the electric power generation industry. New interactions could be largely symbolic because of the recession. Industry won't want more regulations and some in the federal government won't want to create and fund new programs. The best hope is that any economic stimulus/jobs creation package will include funds for cyberinfrastructure improvements. Roosevelt and Keynes used large public works projects to help the economy in the 1930s, the next administration can follow suit, but with a 21st century twist on the solution.