It would be the second major E.O. after a May directive on federal agencies' digital defenses.

Broadly, the administration is also formulating a national cybersecurity strategy and looking at more regulations.

It's part of an ongoing dance in the legislative and executive branches between demanding and requesting private sector action.

One never can be sure Congress will get its proposals across the finish line, but a pro-CISA sentiment abounds.

The U.S. still isn't well-equipped to answer the challenge ransomware poses, Chris Inglis said.

"We all know that phrases like 'public-private partnership' and 'info-sharing' have become hackneyed bumper stickers," she said.