Cyber-security professionals from the private and public sectors are part of a commission that will brief the next US president on the current state of cybersecurity, but if a recent GAO draft report is anything to go by, said briefing will not be all sunshine and puppies. Both reports define a number of current deficiencies in US policy in general and US-CERT in particular—five years on, the state of the country’s security remains more of a debate than it should be.