Are Fines and Jail time needed to improve Cyber Security globally?

The only things that will move the needle or too many unintended consequences?