Industry security regulation