The U.S. doesn't have a federal cybersecurity law, but that doesn't mean there is no cybersecurity industry standard. There are regulations, case law, guidelines and state laws—including one in Connecticut that took effect this month—that, when combined, create an industry standard applicable to almost all business sectors.