I disagree. Experts have understood the true risk of a cyber war for over a decade, at least. The infrastructure of the United States, both public and private, is woefully unprepared for such attacks to be brought against it.

I'm reminded of a recent quote describing how getting stuxnet into Iran may have been difficult, but getting something into a US power plant would be trivially simple by comparison.

Not only is the US infrastructure not ready, but it looks like no one is actively trying to change that.

I imagine that businesses won't see the need to waste all the money until something big happens and they're forced to.