If your org was hacked by the Russians/Chinese and was a national safety system, then you might be right to start there.