Chris Morales, head of security analytics at Vectra, told Threatpost that the legislation is a “good first step” – but he wants to see more investment in security from the government in the future.