Experts say the existing standards create a baseline of security but a market-based approach could spur significant new investments including enhanced use of cloud-based computing systems.