There should be an agency that is capable of assessing and regulating all IT security of a business or a government office like sort of ISO .. hacking is not the crime.. keeping your critical IT infrastracture exposed is the crime.. lets stop pointing fingers here.. staying ahead of the exploits and hiring the right people to secure and maintain these assets is of paramount importance.. that stupid cybercrime law is made by computer neanthertals .. clueless cyber-bastards..