Legislation aimed at protecting critical infrastructure and information security failed on Capitol Hill in 2012. With the new Congress recently seated, look for new initiatives to begin floating around committees in preparation for another big push. Any forthcoming legislation will have to walk a very fine line aimed at providing protection without being perceived as a threat by the business community and civil libertarians. This is no small order, but many vendors, as well as policy wonks in Washington, expect continued dialogue in 2013. Given the higher profile of state-sponsored cyberattacks, such an initiative might stand a stronger chance of success than it did last year.