They can (and have) act in an advisory capacity but they have no regularity authority to force companies to secure their shit.
Now whether such an organisation should exist that’s an interesting question I guess.
Over here in the UK we have a similar body.
https://en.m.wikipedia.org/wiki/National_Cyber_Security_Cent...
As someone in the UK tech industry I’m not sure what they actually do on the ground.
They can (and have) act in an advisory capacity but they have no regularity authority to force companies to secure their shit.
Now whether such an organisation should exist that’s an interesting question I guess.
Over here in the UK we have a similar body.
https://en.m.wikipedia.org/wiki/National_Cyber_Security_Cent...
As someone in the UK tech industry I’m not sure what they actually do on the ground.