Strategic Studies Quarterly, Spring 2011, Vol. 5, No. 1
but in retro- spect our questioner may have been on to something. At what point do we shift from additional investment in defense to more investment in response and recovery? ere are more questions that could be asked, many of them as funda- mental as these. Most we have not yet answered or at least have not yet agreed on answers, and none of them are easy. How much do we really want to empower private enterprises to defend themselves? Do we want necessarily secretive organizations like NSA or CyberCom going to the mats publicly over privacy issues? At what point does arguing for Internet security begin to legitimate China’s attempts at control over Internet speech? Do we really want to get into a public debate that attempts to distinguish cyber espionage (which all countries pursue) from cyber war (something more rare and sometimes more destructive)? Are there any cyber capabilities, real or potential, that we are willing to give up in return for similar commitments from others? To
