I think the bill should specifically define the levels of security needed for various types of infrastructure, and avoid allowing a government department to be able to change it.