How should government justify telling private industry how to set up or improve their cybersecurity?

How should government justify telling private industry how to set up or improve their cybersecurity?Keeping the focus on national security concerns, clearly discuss the compelling sociopolitical reasons, motivations, or arguments for or against government intervention into private sector cybersecurity.Clearly discuss the methods of government intervention. That is, what authorities (such as laws, regulations and rules) give the executive or legislative representatives the right to regulate private industry?