Lawmakers frequently introduce cybersecurity bills in Congress, but usually they fade away and never become law, despite the apparent need for them by high-profile breaches that seem to occur week after week. Eugene Spafford, executive director of Purdue University’s Center for Education and Research in Information Assurance and Security, sees Congress’ committee structure as a deterrent in getting cybersecurity legislation passed. Various committees in both houses claim jurisdiction over different aspects of IT security, and intra-house squabbling can cause a bill to get lost on its way to becoming law.