Private Actors, State Responsibility

What lessons does the private security industry hold for regulating private sector actors in cyberspace?