Software security and privacy issues regularly grab headlines amid fears of identity theft, data breaches, and threats … Note argues that policymakers should pursue standards-based approaches to regulating software security and privacy … security and privacy, but with an effective regulatory standards framework complemented by engineers' technical expertise …